{"report_id":"90b04dcb-4c61-474c-9cc9-b2a6d4a1ff53","version":0,"status":"done","tags":[],"date":"2026-10-09T16:19:37Z","url":{"schema":"http","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":0,"asn":54600,"as":"PEG TECH INC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"title":"射多少發都不想停下 沉溺中年大叔激烈絕倫SEX的人妻 星川舞","dom":{"size":38159,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (617)","md5":"a9e86174bd234bb39a68994d885ff135","sha1":"807ca6eec61363c9336b85c40305030a12fa9ce3","sha256":"3a6f08604bede644c8f92cd7379e56ef712d3e9208f8abff0545c16da587a70f","sha512":"dd85055ea1c5fb1e401b79ddaade1942cf84773c36f2ca955833d0ea3703ed36832e091126052d6711a82a42822e08049d957fbc70945ad0a41af79dc693bb17","ssdeep":"384:KbF095ixBBwfoniI6j7zro0+QpW7GHTH7eaH7uG1YWIONaN7irH3R2rz6G65rqrz:aK73I6G63hjYM/Co9Hw6k","tlshash":"b9037332a5cf4c6b306253cec9ec6338109f8e3dd9514c5df6b3526c8786da2664b2e6","dom_hash":"domhashd1e57bdc6df1cb448d9025fc22a2d0b9","first_seen":"2026-10-09T15:57:53.674502Z","last_seen":"2026-10-09T16:19:45.44953Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":0,"asn":54600,"as":"PEG TECH INC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T16:19:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"myt-bitget.com.cn","ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-10-09T15:57:48.169026Z","last_seen":"2026-10-09T15:57:48.169026Z","alert_count":46,"request_count":46,"received_data":591419,"sent_data":30797,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfb0eb78f7946de987aa1bee874f6a87","sha1":"7d727fc9b6f9665fa4b6f07f07dfaaaba8bd31bd","sha256":"c9caddff08dcc9e24ee3a4da927c894b0c8160158ff32aef0293a90cf4fdc983","sha512":"e6473a33e2bfc61b78d6349929eb1a47ce7c8f71ef4c266d4518e4244cc65034ceb4c828eda167abd8b08d03cae3cae2e2a47c48d09dc977e73df639d2e1953a","ssdeep":"","tlshash":"4df0c92e7a6b5070687302abc77ba3c1f48040399800d481a884cc8caee0f412c669cc","size":526,"data":"","first_seen":"2026-10-07T08:44:42.967129Z","last_seen":"2026-10-09T17:29:32.142736Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ba4a0637fb451769359d8969005a96e","sha1":"25507408abf5a42a11d9eb020feda1e1fef93c38","sha256":"ca6c135f2ba4a8c7fb4fa535b6a00361631700532fd3d32786410a3531e4acb6","sha512":"d9628ae6b5274e8a8fe05091586c9c405f16bd433bc15cc4b8862a54cfa1038766fc646f8a3b895ccfca861773a57b41f8333510a5a05b0745c56c3c7bbafcf4","ssdeep":"","tlshash":"6df0c05e7d42e120a6913d2a23bbe99ce9dd04295009c80747d9c29d6c28ff94223608","size":548,"data":"","first_seen":"2026-10-07T08:44:42.968101Z","last_seen":"2026-10-09T17:29:32.144009Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/real-visitor-stat.js?v=5","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9837cd3106fdfa1378481197a3de530","sha1":"477f897f79a64c6fea0bb01fa4134550366737d8","sha256":"b2fac051fe734a412e0a7a11c8f9e96dee4cb5135b42274e2913c467ce8ab38d","sha512":"bc7274af846e2234ad1de9afb4c275648d3626a88d295be041889ef17e13dfbdd074af09a90acde9e8f52ab3902ae2a7b747e61a5abc3ff3dc744307247e20b2","ssdeep":"96:OpacGuurwau2am9PMaT6KZgNnuS4T/IeEyLyXAwkyJ:pc9uQ2aeCnuSDyLyXAPyJ","tlshash":"0091cb981dd2217a40b3a13e0fcfa054b272d157158968203ebdc3747fea97e8172ea9","size":4239,"data":"","first_seen":"2026-10-07T08:44:42.905542Z","last_seen":"2026-10-09T17:32:38.439151Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzU0NzNiMWJjYzIyZmEyYWUwOGIwZmU2ZTVlYzQxMTNiLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.477Z","timestamp":1791562537477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzU0NzNiMWJjYzIyZmEyYWUwOGIwZmU2ZTVlYzQxMTNiLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2754\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-ac2\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2754,"size_decoded":3089,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f7ba11b14026ba8bb86f8265f0afce3","sha1":"78c50d85c8fd169d6dedefdde91f7423b0f9e584","sha256":"5afc374b5869999ffd623874acc8715ca75cbbf29c1e56267eaa650ecdbd045e","sha512":"10630f32a1cdc617c26af800185c28018c569fb9b41fe1209757126e079885016e222054086275749e012eb25ab048bfaa7be187a08bb80a4bded9439a52a5cc","ssdeep":"","tlshash":"84516c6adb1095d87af2fca42180338a8cce568b8e57d60c4282f0324c802ad96275bc","first_seen":"2026-10-09T15:57:53.700427Z","last_seen":"2026-10-09T16:19:45.454123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNy0xL2RlYjY2MTg3M2U4ZWU1N2I4OTUzNDc3YmI1MjMyOTJjLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.483Z","timestamp":1791562537483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNy0xL2RlYjY2MTg3M2U4ZWU1N2I4OTUzNDc3YmI1MjMyOTJjLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2816\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-b00\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2816,"size_decoded":3151,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a373edc28c60cd0e14c3db91c519fe63","sha1":"f132923444877df00d850c005a41ef4def86d7fe","sha256":"2acb90ecf07b408aa112faf93a891256807c84e28e912011bb158c4593dcd458","sha512":"0e4fcc5b6e006676a4de5b276a06cb5d572c6f7f561a3c1645f64c9313c44263eee1d1cb355f95366d71cec78e63e78ee2876cb836fcfff647a8932f1d0ad38d","ssdeep":"","tlshash":"ab513c198f0a5bfc8f7e0a5ebc5b17abd2c1055b19481b0578581a3708e941fd3e08d5","first_seen":"2026-10-09T15:57:53.818418Z","last_seen":"2026-10-09T16:19:45.458792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzFhNGE4ZTJiZDZiZTQ1ZDU5NGJmNGUxNGIwMmU5YmZjLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.491Z","timestamp":1791562537491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzFhNGE4ZTJiZDZiZTQ1ZDU5NGJmNGUxNGIwMmU5YmZjLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3008\r\nlast-modified: Fri, 02 Oct 2026 09:32:01 GMT\r\netag: \"6abf7a11-bc0\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3008,"size_decoded":3343,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d08dcb0ba9cf8bf9bd715a9038faee0e","sha1":"98852a6d3e91c6abcc631e34310a8e43b0f32968","sha256":"b94a012dbe5c392b974e1f4b0becb911755c05d1861686712fa03f2ac535158f","sha512":"2111f367dc589f10a4eeb05d8e4e615327d34ffdddd1d9b345b9f003002793f4ca33de2e8858ec50f7bb9e12c2c2d50a3d0bb4792ce837a7cb3fbd56609c29bd","ssdeep":"","tlshash":"b9515c5c1902feabf7150a099a3ba68c52173c009962ea62186db71397808ab8474d1d","first_seen":"2026-10-09T15:57:53.769476Z","last_seen":"2026-10-09T16:19:45.462262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1169,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/Template/YUTU009/image/video-play.png","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.930Z","timestamp":1791562537930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /Template/YUTU009/image/video-play.png HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/Template/YUTU009/css/zui.css\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-61f\"\r\nexpires: Sun, 08 Nov 2026 16:15:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1567,"size_decoded":1769,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"be7ca0a4a7c0317398a11162b1e09b75","sha1":"5dbe6a02524cfbf5f5111478a71f91a9259056b5","sha256":"cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4","sha512":"a738fdac66796ab0963d1455f08ae6abfbce330a962b0318975db98a8c1939b4406a39302e6bccacff8bd0f7f52fb59a41eb9b664af975719ac1f3c0a3753e6a","ssdeep":"","tlshash":"7e31d78dfd61184267ead44b28f5805b8c170980dedce69bba8fc82719201f6193a3cf","first_seen":"2023-04-05T09:54:40Z","last_seen":"2026-10-09T17:32:38.493269Z","times_seen":4890,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2Y5ZmVjNzg3MzVkZDRmZjgwNDRhNjVlZmM1NzNkNjFhLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.497Z","timestamp":1791562537497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2Y5ZmVjNzg3MzVkZDRmZjgwNDRhNjVlZmM1NzNkNjFhLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8382\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-20be\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8382,"size_decoded":8718,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d891f2dd663100fc9954cb143e7b220c","sha1":"6743053608592521950059ae13dca1f3c8a9c671","sha256":"234d38b42e26469110885937004b39673cb8c0b720bf37aa14035f75bfc04473","sha512":"dcd36a486494c0661e5b2cbe1d860d7cd9d4fa94a05e98ec5e55ac82d9846b6b8ba81c2acdbe2d557e0886734a705ebbd3171285e183ce9eaee08c5db089f10d","ssdeep":"192:9x7DfCh2Iu5dV/k1CQ9ebu0YPnXJLVyWeWvsEfCO/qSP:PDY2b5Tk1PSu0YPZ5+eSPSP","tlshash":"1802bf95499d89a8c892d37994bc8fcc41ee1ad4a616ca41654dd033de83cd8b06613f","first_seen":"2026-10-09T15:57:53.744346Z","last_seen":"2026-10-09T17:32:38.462408Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1164,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzJmNjY5OWRhMzRjNTA0NjEyZTVlOTU5Mzk1YzAwOGEzLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.505Z","timestamp":1791562537505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzJmNjY5OWRhMzRjNTA0NjEyZTVlOTU5Mzk1YzAwOGEzLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6116\r\nlast-modified: Fri, 02 Oct 2026 04:53:38 GMT\r\netag: \"6abf38d2-17e4\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6116,"size_decoded":6452,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"669c023758dd571cf9dd0fcc079e38c9","sha1":"c85b03f99eea7108afeab2e6b3044eae57bb0d8d","sha256":"b0f835ef6711a3fbd83213849df559db19a0fc13159dbb05db8d7005d6e1d11a","sha512":"269841c8fa48ddd520ff86d1160211e1b7822268218e691694aab89dc0cacfd544ea2f3a17e42656f7bc3d7af000cd4d6bac1ab93f20e9d99e8c93f6be22e11d","ssdeep":"96:sJm0jyO/oKYs8pNX+3yd0fzqeguW6+MEmUcE2AUkpyOeh1Nr/Rx5UdTOFda7njeR:sJH6KYs8jX+CdIMu2mb2Ueeh1NVUgFsE","tlshash":"d5c18e03136ca9ddec998f09211f971a57725124da326824831544abbbf41befdaf0d7","first_seen":"2026-10-09T15:57:53.75565Z","last_seen":"2026-10-09T16:19:45.479249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1156,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/Template/YUTU009/image/video-mask.png","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.929Z","timestamp":1791562537929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /Template/YUTU009/image/video-mask.png HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/Template/YUTU009/css/zui.css\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 107\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\netag: \"6aa90d05-6b\"\r\nexpires: Sun, 08 Nov 2026 16:15:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107,"size_decoded":614,"mime_type":"image/png","magic":"PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced","md5":"6a5ee87ff75437cb480df839f36004fd","sha1":"eac66370f99601cb7febef320c9540d4593cd856","sha256":"c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa","sha512":"c0c71d6fbfcb472b7698354ce44b111cdd5a62eda31b1e8cfa62d585f9fc14ded889ca7763b4f23aaa8a12a10e1e32b3c605485ae8821c031066ed7e89493b05","ssdeep":"","tlshash":"8cb012e36f629d74ca80517bc3a69705ef36d12e423eb7090b05c4351c24109698550e","first_seen":"2023-04-08T11:25:09Z","last_seen":"2026-10-09T17:32:38.434312Z","times_seen":1725,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":730,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzhkOThlY2JmZmM2MTI3MGM3ZDllMzYzOTA1ODRiZWYzLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.470Z","timestamp":1791562537470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzhkOThlY2JmZmM2MTI3MGM3ZDllMzYzOTA1ODRiZWYzLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3772\r\nlast-modified: Fri, 02 Oct 2026 09:31:10 GMT\r\netag: \"6abf79de-ebc\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3772,"size_decoded":4107,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"81e5fbea468ab33dd43cfa20156db167","sha1":"d20a596cfbceb4ce1840426d3af47fab3bcff038","sha256":"be837fc1b737784aca3f96e038fb9b6d100a36ef206e9264db6543104fa0f6d5","sha512":"1b2baa5037eb9d1d8cbff73ff72f7274ba86c9c73232c6d90fafe414756158031c7baba18d5a4d467e819f311e56f71adfec5646b23e09af5a71f8d039e4eaa5","ssdeep":"","tlshash":"59716e557f31b0270b9219a3142087b786a59b480dd0d8972ed430137ba33247bd9ead","first_seen":"2026-10-09T15:57:53.69571Z","last_seen":"2026-10-09T16:19:45.492448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1189,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2NlZGE3ZWM4MDM1MmY3Zjc0ZjUyM2ZhNjM2NTI2YTZkLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.473Z","timestamp":1791562537473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2NlZGE3ZWM4MDM1MmY3Zjc0ZjUyM2ZhNjM2NTI2YTZkLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3700\r\nlast-modified: Fri, 02 Oct 2026 09:31:10 GMT\r\netag: \"6abf79de-e74\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3700,"size_decoded":4035,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9310508d093f71e24bf138958793b52b","sha1":"42ce9a86a620eec2deb3f423349dc23a17d64452","sha256":"2c9f201b99cfb337aec78b6fa7de1a0ba7d87e000a76a4711249a85560153cf6","sha512":"891d02913e2fdb53b424b1ca74949fbd8c99204cb31bf7eb15a83a5b1c8459649e01db6396afcbf38f907ff91373aec60f580d7f83a9733d7cbed6cdb785b4ec","ssdeep":"","tlshash":"9e715e24ce1f5af4c6247d4c78c54c175cf8598b1b81b9edd4902a653d3c14126e82ff","first_seen":"2026-10-09T15:57:53.723327Z","last_seen":"2026-10-09T16:19:45.497162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1187,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzVjZjc4ZjQ3Y2Y0MTEyMDY3ZTEyNmIwOGViYjg1N2EyLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.476Z","timestamp":1791562537476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzVjZjc4ZjQ3Y2Y0MTEyMDY3ZTEyNmIwOGViYjg1N2EyLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2810\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-afa\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2810,"size_decoded":3145,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0508686eb2e345d83602820772a7b113","sha1":"3f27dbd1698fb08f70a3e63aafd52e92a76357c7","sha256":"b1c604c7298da94a50f2967960f2b4896a1d8bf7d56344cb3120b32104e707eb","sha512":"01825b8d0ccf16e4ecc348ca9a0a5581de5f1c2bbe48d7769919f72613fbedf42e9f84584b3bf61bde6a70bcf5b59aed286e58cae9a32ca8afd3aaedc49feeac","ssdeep":"","tlshash":"64514c756414ecb9c79f823cdf37df84057dae856a0ad406dc41d19766e0774790007e","first_seen":"2026-10-09T15:57:53.913017Z","last_seen":"2026-10-09T16:19:45.499454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2JlZWNjODUzZTEyMTkwYjkxZDVjMTIyYzFhYTczY2ViLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.479Z","timestamp":1791562537479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2JlZWNjODUzZTEyMTkwYjkxZDVjMTIyYzFhYTczY2ViLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3418\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-d5a\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3418,"size_decoded":3753,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bbd31fec6d3d1fa4f5b086508e50698","sha1":"97af3d50c9ec6fe2771999fa8b8dd9b43e68a64c","sha256":"8ce4221c55b62e725141f973e016ad2d2606cc87ddb30626adcb3fc4acc8e274","sha512":"9ecebd0fa56a739032a7669467bbcb392d2f01da3325cd6baa2d8d64062f85e5ab4ad045439f0afb6a77ad9d7d3d0037a1c5ba1fe84cd7b0a991c551c601b379","ssdeep":"","tlshash":"ae614d3359ef0934c43d4cad6859ee8b845eaf20ea6ccbc06072b11b9dee9806250854","first_seen":"2026-10-09T15:57:53.88198Z","last_seen":"2026-10-09T16:19:45.503319Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1181,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzY3NGNjMGExYmU4ZTI2ODM1OTUxZDcwOWE0MGVjMDk3LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.495Z","timestamp":1791562537495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzY3NGNjMGExYmU4ZTI2ODM1OTUxZDcwOWE0MGVjMDk3LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6544\r\nlast-modified: Fri, 02 Oct 2026 09:31:45 GMT\r\netag: \"6abf7a01-1990\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6544,"size_decoded":6880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1361b3c4d1bf691109c2d31262c62150","sha1":"ebe67a5f3e27a7c376e78885aa8fe089a8cf6beb","sha256":"bc472fe35cc3c8e2294f9c6ba5e4c1f1159b0fdb7828c5e95c084f5fd97b2c09","sha512":"c66901dc693c1ad6d7d33eb901b4133c3842eab3e2f90da02ef34691e3f5992d9caf0aa69b257d3ccd0411a2ff6bba4f88fc29b2a46d91099330b18832c8075c","ssdeep":"192:oHZ5fOErdM8n0ycPxz8IoaFNkXOvmCW3DtD6l2AARB5DBfj8nt:o5680hgaFuLDtD65AD5p8nt","tlshash":"19d18e2e0ec0dd0962457f5f5bd00e99ea11f755d4d3bd3915a29985d8b02332a07acd","first_seen":"2026-10-09T15:57:53.712405Z","last_seen":"2026-10-09T17:32:38.490533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2UwNmY0ZDJjZDMxMjNmNTIwOTBmZjM3Mjg3OGEzN2Y4LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.499Z","timestamp":1791562537499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2UwNmY0ZDJjZDMxMjNmNTIwOTBmZjM3Mjg3OGEzN2Y4LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4576\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-11e0\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4576,"size_decoded":4912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"97a35a1c0af6c24333ccc0c79821b3b1","sha1":"26204941fea63b5568d10682568098b5b2d26005","sha256":"5e8d6e2b38b98b4f577810e54416636b849c548b650f5d0827e3801c004c3955","sha512":"d058a736e0909e43dba3e287115c7b4caba8afdc90ae289cf634c510ba44fd083670ac6045931bb713c3d4e87d447616fda71e1bbf9ec583ac4292065e6a68ef","ssdeep":"96:NR3P6EJyyC5+1TPp4NPvkepB7BAS2WYYlVA7pViY:LfjyyE+1Opkeb7BAnWYvl","tlshash":"8a919ea0de95986773d159a36947089d83df0d80918f87f2a13ac07015e38fb7c34049","first_seen":"2026-10-09T15:57:53.917931Z","last_seen":"2026-10-09T17:32:38.455094Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1162,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzFkOWFkZjhmMjFmYzdiYWY5MTA4MDYwNTQ0ZmYwYWJkLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.482Z","timestamp":1791562537482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzFkOWFkZjhmMjFmYzdiYWY5MTA4MDYwNTQ0ZmYwYWJkLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3452\r\nlast-modified: Fri, 02 Oct 2026 09:31:52 GMT\r\netag: \"6abf7a08-d7c\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3452,"size_decoded":3787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4fa6e9dfcb9aa9247606766dd295ae9b","sha1":"5ce78faa189c486c924944feb14b16ea9d2d8f64","sha256":"62edd40acbddc6c8058a731b987c0e621926f77e2919bb170406c766e0144e6f","sha512":"522fd04962428e9b5e7718961ddf16a1329b1a4ae1de2a5a6930e731df26f735606b18707ee6de31633d86ae5d302e0b83861eaa22a132a5d8cc12d9748e5c88","ssdeep":"","tlshash":"4a613bb1d1f025400fce27a84563a52f8ec084c8ae9ad51955f05b457bb42d86b2d833","first_seen":"2026-10-09T15:57:53.733413Z","last_seen":"2026-10-09T16:19:45.523788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2UwYTJmOWM4Yjc0NmRhMzE0MWFmMmQ5MGE2MTgxY2Q5LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.483Z","timestamp":1791562537483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2UwYTJmOWM4Yjc0NmRhMzE0MWFmMmQ5MGE2MTgxY2Q5LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4528\r\nlast-modified: Fri, 02 Oct 2026 09:31:26 GMT\r\netag: \"6abf79ee-11b0\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4528,"size_decoded":4864,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f23525ef6707452be71be236b9f08ed","sha1":"2a90e6729cbf4f70cec54ef9dce3181b7e0f0277","sha256":"ff1f6ffe3ff4d2496cee807e72d28521655760fed34c6b3940431affcc4b2c09","sha512":"a5719664f4ff3d3b91ac573f14b01dd0f625d100535b8741e955749903252797a3ee3441d1de938a556bfd197b0146e2ae3714c6acfeb1be5cc75f419f364cea","ssdeep":"96:ffFOKJ1c3l4cNIRV7PjBso18KL22qyC/mOfh3YHnON9HLOAX5w:HFR1c3lbNCx18PiC/m6h3YHOOU5w","tlshash":"92916c551f2022eed5a67cbec5bfd4d300711ec0a6228e256e9de4b9cb90d04b266ed3","first_seen":"2026-10-09T15:57:53.701876Z","last_seen":"2026-10-09T16:19:45.52589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1178,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2I3Zjc2MzI5ZGRiYWQ0ZTk3ODkzZjgwMzhmNWZiZDJmLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.487Z","timestamp":1791562537487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2I3Zjc2MzI5ZGRiYWQ0ZTk3ODkzZjgwMzhmNWZiZDJmLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3148\r\nlast-modified: Fri, 02 Oct 2026 09:35:19 GMT\r\netag: \"6abf7ad7-c4c\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3148,"size_decoded":3483,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4e421f8d5f74d0535a11887f579ab7b","sha1":"f5f60afca1d6577f294ba19d441220aeee5504aa","sha256":"482d0a74bd2ae03535bacfc47556ae2103c2cc137cfb650d9281e547ee1527c2","sha512":"0b4d5924c06590558c5aae7301b0dcdd15a237cbcff2f0ea288bcd6bdcb821de8b19fcee4eb9fc06088fcedb0f877ed78dfca06411d7f374ca542d48cc0d54af","ssdeep":"","tlshash":"61515d4266723510dc37192f95ff8930a2e1a2f98369b7806ae4ced15938d861491e25","first_seen":"2026-10-09T15:57:53.884708Z","last_seen":"2026-10-09T16:19:45.528405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1174,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzJkMzg4ODgwMjYyZGJhN2RhMDYyYjY1YzE5YjdlYWY0LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.488Z","timestamp":1791562537488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzJkMzg4ODgwMjYyZGJhN2RhMDYyYjY1YzE5YjdlYWY0LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3592\r\nlast-modified: Fri, 02 Oct 2026 09:31:37 GMT\r\netag: \"6abf79f9-e08\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3592,"size_decoded":3927,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7701b0631db843720a3bf3ac41a1a134","sha1":"88461b3ca4c717074f2b66d3ad273fe34ac3e72d","sha256":"ff434f1a85f94bf8c816c43e13dbe0809ca465ab03c2fe9aa1c97ec35004a6e8","sha512":"edc7ded95d2c634fbe78f4c19bae87092dd1c05a07bf4615507a063535c325e376f94a3e519b9f7e0adfc21028929fa2f00de71006faa2dba56b91f2d2ab8287","ssdeep":"","tlshash":"7c715e1b70c6f5e19b6e6da8d0719328e0d10def08bc6970ed25bc458d79097f580dc6","first_seen":"2026-10-09T15:57:53.687911Z","last_seen":"2026-10-09T16:19:45.530659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1173,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzU5NTI1ZTk5YmQxZThjYzk4NDVmMTMxNjEyZmEzODU2LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.500Z","timestamp":1791562537500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzU5NTI1ZTk5YmQxZThjYzk4NDVmMTMxNjEyZmEzODU2LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5948\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-173c\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5948,"size_decoded":6284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac40e93a59b9991bdb169d43aefdf3d0","sha1":"d7fc997dcfeb3407a5efc763f6db9467f2e944f4","sha256":"2ad0592b99e7a4d03ec776400aeefe686dfb03455711f61707a24deb466a4cd6","sha512":"3fea16d85ed4ce8426668999675c4fb4cdaa5b315a13c6403ce853b13936190473279a90036d8a9a99462c164e1873294a07e10fa884f05c6a38af56b15183f4","ssdeep":"96:ritleE6qwEw4rGseoYnKgM4ewjE7jaQ9qvtMguW2VINPQswlVkE8gSwnL0f4y6b:2PoA1gGEIYwWwIqHlVk/ZsL0Gb","tlshash":"5dc19ec3468e4990b3c965387834d9252b5bef8e5456880a29bd9dffb37e0d6f135004","first_seen":"2026-10-09T15:57:53.897915Z","last_seen":"2026-10-09T16:19:45.531962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1161,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzMyNDg1NzYzMzM1M2RhNDdiOTdlY2YwYjQ3M2Q1NmRkLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.486Z","timestamp":1791562537486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzMyNDg1NzYzMzM1M2RhNDdiOTdlY2YwYjQ3M2Q1NmRkLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2826\r\nlast-modified: Fri, 02 Oct 2026 09:34:08 GMT\r\netag: \"6abf7a90-b0a\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2826,"size_decoded":3161,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ee54d83ce55bec398258ddb284d60d1b","sha1":"a07e7c58dfe93f9f53ed83bf7bb4e627a6c0c8dc","sha256":"4c2e93310a0fb2a5534887cedbff97b750d37e51e29162aaf5c0254341e1c8e8","sha512":"17b647397aad2a5e3d5e3d6b78d748b3156089b2b57ecd1f8222e887b02fc7311010b22c5eb442b525afac5af1711913dda31e352b2c42bbf1fe3c4ae8ac008a","ssdeep":"","tlshash":"15513aeb5d59ae68c1e917f9b510014a742d029cb603b4c99d8297ff65ba8cac1f8c22","first_seen":"2026-10-09T15:57:53.916548Z","last_seen":"2026-10-09T16:19:45.533311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzI5Y2M5ZTgwZjRlMTBiZTI0NDBkMGQ2YTk4ZjhiNDgzLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.490Z","timestamp":1791562537490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzI5Y2M5ZTgwZjRlMTBiZTI0NDBkMGQ2YTk4ZjhiNDgzLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3502\r\nlast-modified: Fri, 02 Oct 2026 09:32:24 GMT\r\netag: \"6abf7a28-dae\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3502,"size_decoded":3837,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0074cf2b9dc455831fbf6d0bd064cf74","sha1":"1ec9575e1279806b003eff38ee546f049cff6079","sha256":"10d298d2da4d923a9e040f2b497486fc60761c61a9b05c65096178ce2c5a6f11","sha512":"765ff5baef935e05105073af0f1100cd998c8cd4f5986883d585ef7484c49053e476e3a83085e6cc5b2d11811a44a43e3167ae9cd6de53fffc21bda19f27a83d","ssdeep":"","tlshash":"8e715ab42df58299d8de44bac91d3b9840439506e0c9bf350be6578653027730ca8fc6","first_seen":"2026-10-09T15:57:53.863977Z","last_seen":"2026-10-09T16:19:45.534951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1170,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2E5MGRkNGNhZTAyMjBlZjA4MTI5OWEyNDIzYmE3MDVhLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.492Z","timestamp":1791562537492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2E5MGRkNGNhZTAyMjBlZjA4MTI5OWEyNDIzYmE3MDVhLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4290\r\nlast-modified: Fri, 02 Oct 2026 09:32:24 GMT\r\netag: \"6abf7a28-10c2\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4290,"size_decoded":4626,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d1bbdbf9d24f97785f0adcaa50712df7","sha1":"c2e7c404c8ed4558f94f2dce1e6dd7445d20c84d","sha256":"3c2a3561a812b4503165839b00e8b39a4872dbffde9603ef112d826181755d7e","sha512":"9f19d7171c10bd50080902d68e901ebada2d692de4796604bc224b1a33bfb44f40c5c7f5418a4157aa67da672d4ee4e8c6451990d1fe5fd5fe23bf9289dd2f8a","ssdeep":"96:epfZ9ICBrWTRYn0B4uGKTP/5BUqvfbJ3/kitcLP7hX2QcpV:epftBWJTG0PMq9Ol2PH","tlshash":"96917ecf9fcd6a23cd230c727d483e408626d512f78206f9475baa359cd05134a66e03","first_seen":"2026-10-09T15:57:53.77272Z","last_seen":"2026-10-09T16:19:45.537014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1169,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzJlYjg3MmE3YzUyNmMyOTM1YTM3YjkxYzhkOWFiZjk4LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.493Z","timestamp":1791562537493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzJlYjg3MmE3YzUyNmMyOTM1YTM3YjkxYzhkOWFiZjk4LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2990\r\nlast-modified: Fri, 02 Oct 2026 09:32:24 GMT\r\netag: \"6abf7a28-bae\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2990,"size_decoded":3325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"05f34d3e4e233a6fbd60298f4e75b931","sha1":"12e5a08015d909ef9bdeb2535556378e3d5f73eb","sha256":"1701dbacc48d244453688af3ada1b006e8af370daa1d51deca3e849a4bd08038","sha512":"12760ab545dfc90381ce7e6a2ec6a4920490e8c0dd8747555e2d15fb2f6ff1941673957794b013a8b1ae64dedff1ffa3926515b19b9f516019b875ab36f152e6","ssdeep":"","tlshash":"db516d91038a00da205e74c12958fa3551142b82edf31b0a366326f723532ffb20ddd9","first_seen":"2026-10-09T15:57:53.886893Z","last_seen":"2026-10-09T16:19:45.540564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1168,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2RhYjdjMGNkOGU1MzFkYWYxNWFhZDQxZTZmNzliMDlmLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.494Z","timestamp":1791562537494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2RhYjdjMGNkOGU1MzFkYWYxNWFhZDQxZTZmNzliMDlmLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3310\r\nlast-modified: Fri, 02 Oct 2026 09:32:24 GMT\r\netag: \"6abf7a28-cee\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3310,"size_decoded":3645,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43cce3264c8a1fad8db33a0779603e5b","sha1":"6e9ef0707ea365d25f72c33e8abfca444ec56156","sha256":"d8bf96ca43e05a901af42fa4ca9d7cfe19f3adf5416e88fd27740fe35466cd9f","sha512":"86383f2bafbb993bf17e00564c31bb83857bbeb76ff2fd363f9952c4ee175cfbb1c54259a44f6861a60ab461a264b74ac42c33f6245b3a49c68a67baab56e895","ssdeep":"","tlshash":"31614a86ad27ea1ab6107c3c1ea1d034a0db80baa25cc5808ccd69ce842d61c1bbf12d","first_seen":"2026-10-09T15:57:53.708625Z","last_seen":"2026-10-09T16:19:45.542782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzVkZTFmMzQ5OWEzMjg1MzE0YzY4ZWNhYjQyM2Q5YjVlLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.496Z","timestamp":1791562537496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzVkZTFmMzQ5OWEzMjg1MzE0YzY4ZWNhYjQyM2Q5YjVlLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7854\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-1eae\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7854,"size_decoded":8190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e3c25141f60fe86d10f69e9aa566d42b","sha1":"d2af04890604a7e805dfe81f8b18e3391bfc87a2","sha256":"e98f30e6c7770cdb7e92427039a7871e76dd326a1e1bbf392dc98e9a10a86992","sha512":"78e284261d702f74a4cbdd495f1632136de8560a5e7061e03c5555208978ec0048d4a3414f7f99a168338dcc0aa9b879aedc9fd601668202add06bc5e752c4bc","ssdeep":"192:QWa4IyfgBncN1cTkKNWiC3iF5htDVtfDC3NICkeiI8MFqn17:QWanJ5Tk0hC3iF5htLfmICkeiPMFA17","tlshash":"e4f1a036d2bb40b0c551bc37113a34ca12129c92b90ba754a2653d4eead772f7f0e03d","first_seen":"2026-10-09T15:57:53.741572Z","last_seen":"2026-10-09T17:32:38.453482Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1165,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzk2ZDM2OTg3MDQyNTE3NTM4MGRmNzcyZmQxOWVkODU4LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.503Z","timestamp":1791562537503,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzk2ZDM2OTg3MDQyNTE3NTM4MGRmNzcyZmQxOWVkODU4LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7942\r\nlast-modified: Fri, 02 Oct 2026 09:31:12 GMT\r\netag: \"6abf79e0-1f06\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7942,"size_decoded":8278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29014bd11bd695c15095909dfd7ed21d","sha1":"9ded92514695eef5819402e9648cc21343797179","sha256":"3e572d71c5bf42d6ebeb3e7ad3f7fe200a98ee2cf6b4307118c2af27fec090b0","sha512":"47697516492ae7217f51358971e014cf5ca047b25a64c4e46606d9edd5cebca71216a54c5ea2e5afa31a1eb90e59fff10d05fae2734e3d5f68d5c55aa19083ce","ssdeep":"192:4UBMheNgaf1hPsE772kEkY0f3qLs5ownR6UdCbXpPUSS:HMhDafPUE/23k7v57R94Xqt","tlshash":"41f19f2a11cf4a263e9ae507f74bee95d2a32bfdd2a24cd3588e2791217410f5c0e719","first_seen":"2026-10-09T15:57:53.685587Z","last_seen":"2026-10-09T16:19:45.546442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1159,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T16:15:36.364Z","timestamp":1791562536364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:37 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 02 Oct 2026 08:29:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abf6b54-9ce9\"\r\nset-cookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40169,"size_decoded":8945,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (732), with CRLF, LF line terminators","md5":"91fe6f29a0cff165b57580c99b26403c","sha1":"0ac67370f3d2316afff219f4101d733c2d659601","sha256":"b32091938483598165c73f4cdc9672447c13e47065a4f073987fee120be070b5","sha512":"378e87c27279b8d2d16f20cb34d75046e4b25c16faf587da9056dfbd0892eee82bb5f8f8ad68e470dc5f20cb4151abeeaac869fcef1724fd0640ee4a4cc17554","ssdeep":"384:rbl7095ixBBwfoniI6j7zro0+QpW7GHTH7eaH7zZaN7Qr6342rI6G6YrkrUkrSr8:/SY3y6G6aRhg4pgw8Hw6p","tlshash":"c703503165cf0d6b342283cac9ec5338109f8e39d9214c5df6b7527c8787da6a25b1ea","first_seen":"2026-10-09T15:57:53.792431Z","last_seen":"2026-10-09T16:19:45.547284Z","times_seen":2,"resource_available":true,"data":null}},"time_used":845,"timings":{"blocked":-1,"dns":220,"connect":150,"send":0,"wait":168,"receive":0,"ssl":306},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/Php/Home/kakaxiaikakaxi.php","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.462Z","timestamp":1791562537462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /Php/Home/kakaxiaikakaxi.php HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":472,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":1197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2M1OGMyYzAyNTEwZDE4NzQzMGIxZWUzOGZhYWQyNDlhLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.481Z","timestamp":1791562537481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2M1OGMyYzAyNTEwZDE4NzQzMGIxZWUzOGZhYWQyNDlhLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3998\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-f9e\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3998,"size_decoded":4333,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"77ef540b635358930977655487f8ecbc","sha1":"b646c2f77d39e7f2cf0b24378ef4953b1e98993e","sha256":"7e67f174dc07bab55f276fb329232cacc2e045834f9dad3612461da46cfff160","sha512":"04be517012195088324a28f5f00213387cba2465b77e3458ac4ba5bc308d9a70647649560c94e8a63efdf3156a8d78197ff3a1eff283c4e750c4d54a5daedc5b","ssdeep":"","tlshash":"b8819ec7726791a180ee1b1cd9adc92e02342b0970e21f2804e08d6e910caab94b45fb","first_seen":"2026-10-09T15:57:53.914694Z","last_seen":"2026-10-09T16:19:45.550336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1180,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzNiZjM0NWY3YzFlZGIyODc1YjUzYmMxMTM4YTA0ZGU4LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.504Z","timestamp":1791562537504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzNiZjM0NWY3YzFlZGIyODc1YjUzYmMxMTM4YTA0ZGU4LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4522\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-11aa\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4522,"size_decoded":4858,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9b8f82de297ab6bab667dd342d7c974f","sha1":"bf8324331730379ee2a36194d5f5c922e2e9c0aa","sha256":"7f7612cf0062197d2721e5d3bb68bafaf1618ef0defb652bfdc8aab3695b128c","sha512":"71c8750ec098ae3dd03092d4e57f85ab06a7d328c1f7397d62249578773264001d3d1fd84f880b4e1004638f54ebdd91f4858911bda26b29a5f91cca22d27c4c","ssdeep":"96:xQm4nnooh7EYHbPmg83yOu9C+aigrnSqtJOOUC8653SYJs2xU9UEWBr98AU9NhqF:Fen17EYLmWOu0tfzO+8WJJs2CWr8TIhX","tlshash":"49913b4fa05d7896cd0f5130f7b92f54c0adb963526707ab8a18bebf4e642814b8c502","first_seen":"2026-10-09T15:57:53.746517Z","last_seen":"2026-10-09T16:19:45.551666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1158,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2JmNTdhMGI5NThlZWQ5YzliNWI4ZmI5ZDBkNDRlZTBiLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.505Z","timestamp":1791562537505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xL2JmNTdhMGI5NThlZWQ5YzliNWI4ZmI5ZDBkNDRlZTBiLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6936\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-1b18\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6936,"size_decoded":7272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a1f71bdc95aeafef10652c1b960ef3f","sha1":"2fd6696ef9b25d84f049bd9a64dd8fc628a79a7b","sha256":"dc5c248c23beedcb13b2b38e8fe3462854716350ec15d39e85a917d7d4b9d627","sha512":"407996a4b3f2d21cb043bbb79c0750a7b8f0cb368af0ea43a26a05bbfba8eb9ae7ce7352f6153c5e93a79f822a50fb9d925e761f0787b0c1080fc4cb5d19a05f","ssdeep":"192:7B+bMbkcF80569yZ/93jEEudQxF2WM1BGoR3oh/bvOIWE:7yM4cF8056yFTEE9oRYQIWE","tlshash":"37e19ed78dec6d6a6f03e7c07aea28b342145b65425ae3b2c0e4d8c851365d7800efb3","first_seen":"2026-10-09T15:57:53.778338Z","last_seen":"2026-10-09T16:19:45.553809Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1157,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2EzMTBlMDQ0M2NjNjFjYmNkN2QyOTQxNTJjMDBiY2EzLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.469Z","timestamp":1791562537469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2EzMTBlMDQ0M2NjNjFjYmNkN2QyOTQxNTJjMDBiY2EzLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3144\r\nlast-modified: Fri, 02 Oct 2026 09:31:07 GMT\r\netag: \"6abf79db-c48\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3144,"size_decoded":3479,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c12c661e98c94e50794ae3c5d9d49ea","sha1":"1fecffaf2545240f98ff94550ddaba9e7b1ef986","sha256":"e8a0de9d50cb932a7c201af112b8fd2e4b1a5bc5a92c51f245a18e3ac3a3c984","sha512":"5203c6c3a0092c553454064f8046d345e552acecf8eb4d0e2b24349fca2c495b358f953622f772091d851c714ee391abb07569cee25c768237e9c18bb6283d54","ssdeep":"","tlshash":"21516dea1f90c2cdb4013656cb580370f49dc781a952ffcc41375de8a9a4e48eb610d7","first_seen":"2026-10-09T15:57:53.90745Z","last_seen":"2026-10-09T16:19:45.560401Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1190,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzI0NzQwZmIzNDk3NmI3ZmRmYmRiNTQxYzM0ODZiZGQ0LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.472Z","timestamp":1791562537472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xLzI0NzQwZmIzNDk3NmI3ZmRmYmRiNTQxYzM0ODZiZGQ0LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3654\r\nlast-modified: Fri, 02 Oct 2026 09:31:15 GMT\r\netag: \"6abf79e3-e46\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3654,"size_decoded":3989,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b6a5cb805971cdf8e08adeb738d629c","sha1":"aef3f8e77edba09c5047edf66d71a9e3af274b82","sha256":"74186ed08a151b06d2093030fd9c33bdb2f343608caf7b66529902f18b77b5ec","sha512":"77b329db70f5649c2649547631ab53146034a72f80a5b30df0726b6d8aa3bdfe57914edeff3bed209cd16c8a299fd2e4dec7b52dbb0a45c5cc81c95d61563818","ssdeep":"","tlshash":"41717dc57f3377813d48bc15b5dc410d96ea0ce403de6346db483393d228b65a355a90","first_seen":"2026-10-09T15:57:53.910227Z","last_seen":"2026-10-09T16:19:45.562863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1188,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzkwODA5ODUxMWJmN2EyODY3YmQwNDVmYTA5ZTM5ZTkwLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.484Z","timestamp":1791562537484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzkwODA5ODUxMWJmN2EyODY3YmQwNDVmYTA5ZTM5ZTkwLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3010\r\nlast-modified: Fri, 02 Oct 2026 09:34:07 GMT\r\netag: \"6abf7a8f-bc2\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3010,"size_decoded":3345,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8be880eb275c0167e6ac6af78676261a","sha1":"63cce87731fd940f4ac7c3748072b84fe16278a2","sha256":"51d51ca5673cfb826fc749640e00ac4f036eae2778bce95a3d995c9d33388d28","sha512":"d9efb6a553868d458087dafaaa29619b6aa515ab547ca1b7ae99333877d882efc6549d82ee48410347b8adf669adb7c5687a283ffaa63fd835f59e217e5d32f1","ssdeep":"","tlshash":"87514d9b9ad78a8d9294f2cd02319d9cef600190da8f8176107d50e027e26b3eb2bc49","first_seen":"2026-10-09T15:57:53.821691Z","last_seen":"2026-10-09T16:19:45.564947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzhlMmU5MjdhNDA3MGM3YmNhZWUxY2UyMjE1MjllMzhjLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.489Z","timestamp":1791562537489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xLzhlMmU5MjdhNDA3MGM3YmNhZWUxY2UyMjE1MjllMzhjLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3636\r\nlast-modified: Fri, 02 Oct 2026 09:32:43 GMT\r\netag: \"6abf7a3b-e34\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3636,"size_decoded":3971,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95cfda43edf6395c2426514d355d2815","sha1":"518382505a58feef718b39ee0a60ba3d38f85588","sha256":"e6b9173b9370fa0b2cff95e8ca97caf43ceac1450a2e91556a70faae51a8b9d2","sha512":"25cb452c3a3acc8798be85dcc0d22f50243e29059eaf16cf5c6edc6a930dc4931ce5c81b7412c094bd3fbad1d1efcdb0578e1feb8b8c7ffe763ae8711b750f05","ssdeep":"","tlshash":"99715d54fc79f1447a242805d0cf04c15e6c35d4eeadcc57d9b52daac8449beb4490eb","first_seen":"2026-10-09T15:57:53.73914Z","last_seen":"2026-10-09T16:19:45.568418Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1172,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzk4NGMzMGFiZmNiMDkxYjg0OGMyOWMwZmIwMzdkMmI1LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.501Z","timestamp":1791562537501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzk4NGMzMGFiZmNiMDkxYjg0OGMyOWMwZmIwMzdkMmI1LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4326\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-10e6\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4326,"size_decoded":4662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b45bc7a6a14469e1c5d2bece2315c4a","sha1":"a9b0c711d5fc6d676627bf86ba3f41fde821fcbc","sha256":"727ba2075f26ae05f8e7025367d23681ffde6bcf94c93fd36b6f5ed4c0d54b73","sha512":"f2d6ae0221b42952505954b8523b806dbfa4bedc7b36a38bda636757c70994b932f649a8fa6976ed5645fb514310c9c9cf725dc65f9714bcd8f9de1e78fafbb9","ssdeep":"96:t5xV9omP48z4G88un0XqOE/PleelP/kzsuCZARg1qge0miq:rx7zQFOE/PleelXU9RgW0Xq","tlshash":"6891af63cf4001a1c07ec229aa3a512b6ce127e48ef5594443e4e1eb12e75536c3ecdf","first_seen":"2026-10-09T15:57:53.904426Z","last_seen":"2026-10-09T16:19:45.573862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1161,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/guanggao/176-179.gif","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.506Z","timestamp":1791562537506,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /guanggao/176-179.gif HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 11 Sep 2026 08:58:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3c2bb-25af3\"\r\nexpires: Sun, 08 Nov 2026 16:15:38 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154355,"size_decoded":59464,"mime_type":"image/gif","magic":"GIF image data, version 89a, 176 x 179","md5":"76abcad09da053df6fc6b068fc96288c","sha1":"98ee3ea765f163bbab2803f9d2097beb0d28eb2b","sha256":"108e9b745955f8d073f5ac32f60d5bc6bf428a41bdfd3d5ca12827e67084826d","sha512":"6ddd490987dea1a006bf759f863da81394e8324824ecf17e81f592f750b7e2634a0c582e4274377f60c1d7f5289140d1b0889d9b8591184bf250d3434dfc8c04","ssdeep":"3072:BO1kBpvz4IrayNrvz4IrayNrvz4IrayN3vz4+AwXo9CwlfoUwlfoUwlfoUwlfoUG:A1kBpvzxrvzxrvzx3vzcwXo9Cwl9wl9w","tlshash":"0ee3f12b510ae97287fc76c3697a9824aab51aeb2db3741b50017eccd58743ca730f49","first_seen":"2026-10-07T08:44:42.922958Z","last_seen":"2026-10-09T17:32:38.517521Z","times_seen":12,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":705,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/favicon.ico","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:38.830Z","timestamp":1791562538830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Sat, 12 Sep 2026 07:32:58 GMT\r\netag: \"6aa5002a-0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":435,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/real-visitor-stat.js?v=5","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.464Z","timestamp":1791562537464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /real-visitor-stat.js?v=5 HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 21 Sep 2026 12:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab124e1-108f\"\r\nexpires: Sat, 10 Oct 2026 04:15:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4239,"size_decoded":1845,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e9837cd3106fdfa1378481197a3de530","sha1":"477f897f79a64c6fea0bb01fa4134550366737d8","sha256":"b2fac051fe734a412e0a7a11c8f9e96dee4cb5135b42274e2913c467ce8ab38d","sha512":"bc7274af846e2234ad1de9afb4c275648d3626a88d295be041889ef17e13dfbdd074af09a90acde9e8f52ab3902ae2a7b747e61a5abc3ff3dc744307247e20b2","ssdeep":"96:OpacGuurwau2am9PMaT6KZgNnuS4T/IeEyLyXAwkyJ:pc9uQ2aeCnuSDyLyXAPyJ","tlshash":"0091cb981dd2217a40b3a13e0fcfa054b272d157158968203ebdc3747fea97e8172ea9","first_seen":"2026-10-07T08:44:42.905542Z","last_seen":"2026-10-09T17:32:38.439151Z","times_seen":12,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2E3MWM2ZmE3OGZmMGIxNTY4ODg5Nzg1NWRkMDEyNmFhLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.475Z","timestamp":1791562537475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2E3MWM2ZmE3OGZmMGIxNTY4ODg5Nzg1NWRkMDEyNmFhLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3060\r\nlast-modified: Fri, 02 Oct 2026 09:31:10 GMT\r\netag: \"6abf79de-bf4\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3060,"size_decoded":3395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"054e5ce3d8dfa29baf76dcec49553f7d","sha1":"89e5af45604fe8f50be4e3408e27ba03f9485a07","sha256":"23360ce22f6ab87d38ea9e99e2e8a36d388acb1e1fe82fc8d94289c6cd43ad21","sha512":"45fc1162e7e9b4a981efd422b6299fd2a56ec56d8ad100a23a2667ded73445202931fff6b3c15409d4fa438f07c4fe7197de39388825ee32ee2b8ce1fcabb621","ssdeep":"","tlshash":"c5515d5bf932258d1dba6f3e490dc0bed519f83e6e42d41b9485d3d008315ba09a7fc8","first_seen":"2026-10-09T15:57:53.876433Z","last_seen":"2026-10-09T16:19:45.583012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2UxOTEyMmJkZTllMTQ4OGIzNWMxNjI3ZDI3MzRiMjk0LmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.489Z","timestamp":1791562537489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDgyNi0xL2UxOTEyMmJkZTllMTQ4OGIzNWMxNjI3ZDI3MzRiMjk0LmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1950\r\nlast-modified: Fri, 02 Oct 2026 09:31:46 GMT\r\netag: \"6abf7a02-79e\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1950,"size_decoded":2285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4178d45f320fb070ed9592678076ae7","sha1":"c21841e7dbccac30c9ea3e0e7f4f6b98be0df2b0","sha256":"3fb0830ad5a8b45157924e704a3b4b6e14ca52a0dfdd0b7366a455c25162a6b0","sha512":"766caa251343c407df82b72a5c2add3a0f05aef6ddd1c6b1f0d4b6f52e3ea44ed7c99e0c9c2a330628cb0c5c9eba6d931afffd8cd40d88fa30a9ce0e9ba12a29","ssdeep":"","tlshash":"3a412c25c91ca687f7d0aab75fa1f40307c66d804136517701d0d023e9bf288a05865c","first_seen":"2026-10-09T15:57:53.852939Z","last_seen":"2026-10-09T16:19:45.584093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1171,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzkyMDdkNzZiZDJkMTQxYTIyYWNiZGE4YzQ5YjMxZjhjLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.498Z","timestamp":1791562537498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzkyMDdkNzZiZDJkMTQxYTIyYWNiZGE4YzQ5YjMxZjhjLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8864\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-22a0\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8864,"size_decoded":9200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74e66fc934c6d1cb3966efd179d71be4","sha1":"d1231b71fa621428ef5da8260899ebc92fec9c88","sha256":"c26cedda27a61fcde9baeef8c5a4ab0524241b87097d5209f8632566920032ed","sha512":"6a435d7958321b3e86b7cd7a498d7a910ea344d9e29b5f37fa47943c655c42602c49eb28dba9a3a88105733a17d74bc317bece8753889fee3befafa2f1d843ef","ssdeep":"192:YGOxSM4O8CNWjxXrtHhLQW5NTeySe2dJ/Jz9eJ5h7g:xt1CNWBzRNTeyUdDwJ5K","tlshash":"db02c0ffb711920cd7604b38bfcb7a0b856e5000a3107e02466beb98d5f315d995c616","first_seen":"2026-10-09T15:57:53.824592Z","last_seen":"2026-10-09T17:32:38.491887Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1163,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzc3ZTc4N2I5ZDI0Yzc0MzhmNTNkZGM3NWQ0ZTI4M2UyLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.502Z","timestamp":1791562537502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMy0xLzc3ZTc4N2I5ZDI0Yzc0MzhmNTNkZGM3NWQ0ZTI4M2UyLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5774\r\nlast-modified: Fri, 02 Oct 2026 09:32:25 GMT\r\netag: \"6abf7a29-168e\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5774,"size_decoded":6110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"061d061969a915cd5888d398667bd16a","sha1":"471647f6ec45b39d582f6347b941921dad28991a","sha256":"f99c595d9985f70c7d8d93bc1cc9d27f5e2837b53fa7797d8d3ae8ee72c4148a","sha512":"1480c05984e5d665dd0748a81a009bc38585b8711ca7c9187a859be61a828419e8faac4bead1b3f030dccd1250c524fb1d6ceb6a87c89d04c5b206f7c132dd6f","ssdeep":"96:xwLC6p3f0Woc3k9URiFddeX7ChrnTpnbGpV5IM8vX6sdGUjPprdIPgsGy:aLzp1tU9qi/d/TpipVl6KfUvMgQ","tlshash":"a4c18d0aac9963eb67ad4b233861fc01a239f0b1071bbf6008354581ba5bd5cb44dcab","first_seen":"2026-10-09T15:57:53.919535Z","last_seen":"2026-10-09T16:19:45.588259Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1160,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/Template/YUTU009/css/ate.css","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.421Z","timestamp":1791562537421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /Template/YUTU009/css/ate.css HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-126f9\"\r\nexpires: Sat, 10 Oct 2026 04:15:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75513,"size_decoded":5307,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"580e81cd261092011edff6a6b7e3225b","sha1":"c90d9517dc369865cc7e3a39d6929a8b9f0fda70","sha256":"46eb12417797e6d53f6b44cd31b34a4c8f83d0bf21412440f64aca939db2d0b5","sha512":"d242dfdc67cd32549d1e41be7ae40978df48ea39b03905d096b53f7f753e1db8770fcd3a2dcdc91c7c240730ca1d77388946dc278aa7903f9c08896b14a64e1d","ssdeep":"384:ta1j186hY9Y9181VYtYZ2x2Jvuv3XUY+Y7VdV4YHYBIELiE2/SriSazGuqbu:k1j1BY9Y9181VYtY6XUY+Y7VdV4YHYA","tlshash":"c6732c6e194111c447728f29d3de8e28eb3d917318221eee72c2588b9fe6f5853c9d4b","first_seen":"2023-04-06T19:50:37Z","last_seen":"2026-10-09T17:32:38.463903Z","times_seen":975,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/Template/YUTU009/css/zui.css","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.422Z","timestamp":1791562537422,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /Template/YUTU009/css/zui.css HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-14f15\"\r\nexpires: Sat, 10 Oct 2026 04:15:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85781,"size_decoded":16302,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5e34fc7acb3eb58cf82c27910ee655a8","sha1":"32783cdc1323b144798baf5a2c4ff8caecb8e789","sha256":"26a7480622e3b69d4a22ef8d4bea305916fcfc5a643eb17a0caa2e0d6f798476","sha512":"9fda4f2ae853fb6f92b1f9f209f5dbed378c3e72068ccd45cb8b5f405833f02704c11fc0fe944a0bb8670448784df84f10d53d42e9734d93ac44f8416223413c","ssdeep":"768:rvMCFtD3Bwr7M5uSemLjsFR6+n06e4AIdxlPJDRhK5Abi79UYJwpnzhuoAGdppMS:Xir4Gqjsv6+deyrpMHFRztO+8rO+5","tlshash":"b8837557f7102149b13787a4fbf3e7a6df2ea003f20206b9fd9d2514c7194962ab2789","first_seen":"2026-10-07T08:44:42.942388Z","last_seen":"2026-10-09T17:32:38.510065Z","times_seen":12,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/logo.png","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.468Z","timestamp":1791562537468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Sep 2026 08:58:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3c2bd-d421\"\r\nexpires: Sun, 08 Nov 2026 16:15:37 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54305,"size_decoded":52678,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"d8d15b51b02bf1d9050d2b9347278ca4","sha1":"99916d59b673bc13076ede09c549aaa907a50c44","sha256":"77bb4140d7512a07d6affc7469d5453ab5f62fe2ba9312bda14c89414ab6e465","sha512":"51a2ac4738c8453df404e3dd7ef3d7fe8ada926dc5376b01affafeb0b4d55b14aafd1ccddac57aace2c71869311578ea9654a4b2c14ae4e3f0cb5aa27965ebbf","ssdeep":"768:jRDU1chZhwbwX94Qq6Uw9fbmQEIGx8Sk0otfaWxsKgX5JlE0SPc5pI8P:jL2YW6v9fbSICMtfaWxsllEbc5pT","tlshash":"023301b757867b36f2d852310bdb564b19150239a37e3b63009c8da47cf2b123d98be8","first_seen":"2026-10-07T08:44:42.958848Z","last_seen":"2026-10-09T17:32:38.476685Z","times_seen":12,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"myt-bitget.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2RmY2Q2YTc1YjlhYmVlYTU2NWE4ZTE0MTcyYmY4NDBmLmpwZw","fqdn":"myt-bitget.com.cn","domain":"myt-bitget.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.109.121","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://myt-bitget.com.cn/","date":"2026-10-09T16:15:37.474Z","timestamp":1791562537474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bitget-jd.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 04:47:56 GMT","end":"Wed, 30 Dec 2026 04:47:55 GMT"},"fingerprint":{"sha1":"05:EC:1C:A1:AE:F3:2F:D8:D3:45:97:31:76:80:BC:95:28:F5:0F:E6","sha256":"72:7E:A7:E4:6B:C1:32:7D:03:9E:E9:7A:F2:CA:44:43:AF:8D:98:D6:07:C8:62:F6:27:6C:36:A9:33:E1:3C:59"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxMi0xL2RmY2Q2YTc1YjlhYmVlYTU2NWE4ZTE0MTcyYmY4NDBmLmpwZw HTTP/1.1\r\nHost: myt-bitget.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://myt-bitget.com.cn/\r\nCookie: server_session_f8504e49=b44727ec0eed6ace33ef271bef45a776\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"b44727ec0eed6ace33ef271bef45a776"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 16:15:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4096\r\nlast-modified: Fri, 02 Oct 2026 09:31:07 GMT\r\netag: \"6abf79db-1000\"\r\nexpires: Sat, 09 Oct 2027 16:15:38 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4096,"size_decoded":4432,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ecbf4d59111fa8332809af2d961a2607","sha1":"463f738c271a6956e3d5449678ebe072080ad716","sha256":"ca75021d8a3256104046e026fbffa9ef88fe7cdc23928e0321fcbff927885410","sha512":"a50233b0e2e4a5d1d79011ea070f490c075d0ec7401608af34b91c336ed433bf407ba642984cd4e22f494a64a4d8cb84801efee08b09c8c8d8ed9c2df1e9c600","ssdeep":"","tlshash":"8a81afc2a8cc522d41a0ee84e09b05ac74067743c56f46c39d3b36cf3f90600101b4f7","first_seen":"2026-10-09T15:57:53.725977Z","last_seen":"2026-10-09T16:19:45.603115Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1186,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"myt-bitget.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}