{"report_id":"e3fc88c8-d1fc-41ab-a509-43d2bda276e0","version":0,"status":"done","tags":[],"date":"2026-06-23T12:26:41Z","url":{"schema":"http","addr":"bybitget.com/bybit-zhuce-2025.html","fqdn":"bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"www.bybitget.com/bybit-zhuce-2025.html","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"title":"Bybit注册教程2025最新教程 中国大陆身份证可认证 可以获得一张visa卡 - Bybit中文网","dom":{"size":29995,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4480)","md5":"03589eb4962341386d6d765e50ce253f","sha1":"5d0d8f3ea78e485109eae27d0c07d401f261dc53","sha256":"447e4bd8c18ade4a228e3236fa937575a78bc8188af0d9212b479ecf327da1ce","sha512":"d70926614d8c8e5c254920216e1722a1c4c9eb1d91d39a28518a19468cc122f908db11bba7c2efe0ae8fd657c26cfe56299b2367e4a5e521c3cf28fd12247293","ssdeep":"384:IT7f2p4E/aRY9Gr8cusuSf9IAGAihUN9I1T7jLu:GfIV/zEjf9EhUNt","tlshash":"68d253f3c3e7586b0662c2c4d274a718fa83651fca87de4d79ac499dafc5d91980320b","dom_hash":"domhashab1a5ffc762fa4ea1fb256d6cee9fd01","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bybitget.com/bybit-zhuce-2025.html","fqdn":"bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":0,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-28T12:26:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.bybitget.com","ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-01-07","domain_rank":0,"first_seen":"2026-06-22T01:05:20.465284Z","last_seen":"2026-06-22T01:05:20.465284Z","alert_count":102,"request_count":34,"received_data":3677245,"sent_data":18835,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bybitget.com","ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"domain_registered":"2025-01-07","domain_rank":0,"first_seen":"2026-06-23T12:26:42.389995Z","last_seen":"2026-06-23T12:26:42.389995Z","alert_count":3,"request_count":1,"received_data":236,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/script/Wonderfu.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"535c948b88d22656e5f1e7ebd8efaca7","sha1":"225e657631fc9c835f0eefb24d395ea0b3c9d1ba","sha256":"f801b83135845e7e5df1f4e56d7cca3009b7e9fda53aff3a5a7d04ffa1b23650","sha512":"7a3f3ce55b86d1e0fb00ea92832c2d0d2a91f1d1eb6cf63f231f1c7d52a2f6c6987621a841b3366dae8fecaa715d2655360cdb48071a460ef1d09106e3d2bc01","ssdeep":"","tlshash":"e1614198f09de259e3fb73344936b008da76140f81088e90fc6d4dd06f72b9585a3eb9","size":3192,"data":"","first_seen":"2026-06-22T01:05:24.720123Z","last_seen":"2026-06-23T13:18:19.88726Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/jquery-2.2.4.min.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85582,"data":"","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-21T17:19:19.058516Z","times_seen":12799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/zblogphp.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","size":7204,"data":"","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-07-21T17:19:19.132641Z","times_seen":2602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/c_html_js_add.php","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"64ab02760bb327fe3907638d774bd954","sha1":"d78d77e5dfcea80d684133bb71f6de45dbc070cc","sha256":"051aecb52b87426b8b8ee86663f66777da14cc69456cbf18ff7443923af7fc1f","sha512":"bc33c3e005b38823f11470c049b66d0b276e9935196972d94e415495bf7976b3976fe956a44b15d37be8b7eb58d9228ac18e72f36c37f8368c6168aae9f81b52","ssdeep":"96:6/iV06qZuiMRd1BhXJnbZ2THKrOeiMMKDg8E:6Cvf1BhXJnNAH8iMNDLE","tlshash":"0091d7545a5601a7143723b7d8af5608fe63066b4000cc2afe7c40682f71f849123fbe","size":4527,"data":"","first_seen":"2026-06-22T01:05:24.751469Z","last_seen":"2026-06-23T13:18:19.899128Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","size":61131,"data":"","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-07-21T17:19:19.042815Z","times_seen":2154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/04/20250415101248174468316866704.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.462Z","timestamp":1782217575462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/04/20250415101248174468316866704.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 39593\r\nlast-modified: Tue, 15 Apr 2025 02:12:48 GMT\r\netag: \"67fdc0a0-9aa9\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39593,"size_decoded":39936,"mime_type":"image/png","magic":"PNG image data, 400 x 333, 8-bit/color RGBA, non-interlaced","md5":"2610463d56e10167d78dc63f4fa50436","sha1":"a67d63a34326a7da049232aa454735ee5cf1f748","sha256":"e24aef14ddabe0d5d499a37b29341e84a8f908e99ae2f711fc65e0e73370d25c","sha512":"ba6a81b7ee1f457d349bd711d920300964e10bbdab3331b8e4a1845311c382f91aef96c40d1b23b127baaa1fd3d1f7dcccb36b6ceba49692e77475893615c058","ssdeep":"768:0u0J3ttGmKdq/6JqISDlwPWMaW6DIS4hzHLbhRmyNe/TZZ:L0ztfXiqI3XavDyhDLbhRLNetZ","tlshash":"f603f174fb30abe300f8ef18e50217a580bad119956fdd0589cf6621f01d12ead73a9e","first_seen":"2026-06-22T01:05:24.758233Z","last_seen":"2026-06-23T13:18:19.894999Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1283,"receive":494,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/plugin/tx_info_module/style/css/txcstx.min.css?t=2023-04-26","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.401Z","timestamp":1782217575401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/plugin/tx_info_module/style/css/txcstx.min.css?t=2023-04-26 HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 17 Jan 2025 09:28:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"678a22cd-35e9\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13801,"size_decoded":3141,"mime_type":"text/css","magic":"ASCII text, with very long lines (13801), with no line terminators","md5":"3ea5ea44ead27adcce23f26e5aa3cc34","sha1":"d674e3f9bb029b0dad2f16ddcf9e9956aa62af2f","sha256":"66e6e786e4ec06a915ac437e987865037ebcddeb040d2b8d8e4de044298d6c3a","sha512":"6671c044fc0bb8e038ba24376fc95fcacbc50103982e92f084cce55865287c9ef75786fc93abb151a7722ac1d0f99693db24459a4da076048fcf126392ba7709","ssdeep":"192:CDtnn9fzqpY2qAXQN/P/WO09S12+7PCW18WVui:CZn9fupYfZF/P09S12+76W18W1","tlshash":"d3528ad3f5e1201b666aa104e9977bbd4ebfb0c05f118cfa560bf3b887864e704e9025","first_seen":"2026-06-22T01:05:24.72954Z","last_seen":"2026-06-23T13:18:19.890508Z","times_seen":4,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101711175798903143240.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.443Z","timestamp":1782217575443,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101711175798903143240.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 401844\r\nlast-modified: Tue, 16 Sep 2025 02:17:11 GMT\r\netag: \"68c8c8a7-621b4\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401844,"size_decoded":402189,"mime_type":"image/png","magic":"PNG image data, 924 x 1312, 8-bit/color RGBA, non-interlaced","md5":"9ab1413379a76042552aad00d5b026d5","sha1":"5a8c243d6873e4b8b33506414fafd0729d83d1ff","sha256":"6393853ec7818c27bf4cc91e9d478d8781c5eb425cfe57ca459d8ef536bc6039","sha512":"02afb39a608df9d399b8dc7f512f673b00580fdec68c87dd51982ef268c537dc00bb0169af9e13ff3452167e89595c2053c3c436cd82d20358cac6e9fa7a48a0","ssdeep":"6144:M/v+/KlgxkLqBnYgLURoeeMEdGjA1EmTkRpgoNMKszBGs7rfVjAB8W:MyQ+tKzZEYg3t17rfeCW","tlshash":"318423932010caed78643d86ea1f8e7cfb36f012b919dd6d4a14b785a2c97de6630cd1","first_seen":"2026-06-23T12:26:47.088685Z","last_seen":"2026-06-23T13:18:19.903755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1301,"receive":915,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101712175798903254638.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.445Z","timestamp":1782217575445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101712175798903254638.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 513125\r\nlast-modified: Tue, 16 Sep 2025 02:17:12 GMT\r\netag: \"68c8c8a8-7d465\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":513125,"size_decoded":513470,"mime_type":"image/png","magic":"PNG image data, 1080 x 1138, 8-bit/color RGBA, non-interlaced","md5":"ec73bf6092ff0ceed5364c59f4c94514","sha1":"cbda303083c8850beb1e6868c7d5d2213955fa1a","sha256":"ca8212d8538b1bcf3af7c54abb32c04b6691f6381b21054ff6c5b521406e1bbd","sha512":"13c69c7748fcedc410fb038873b5b303e81ca9acc689ac90c82dd82f63329fffd6ea945f8dccd5b840683cfe4f0b987363e6f57ec9342a28fe84fa6a80e5169b","ssdeep":"12288:zJ2vdav+eQR0rnnzcfA3z8pCyBEI8R7hCkTEOjx+SXQ:zJ6av+Hizt8nO3hnEmk","tlshash":"e7b423aab367f1812d17ac3c5c46741d6749a217d84c8534d82efa2cea0fe151ff0a9a","first_seen":"2026-06-23T12:26:47.089647Z","last_seen":"2026-06-23T13:18:19.896526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1300,"receive":946,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/include/nopic.jpg","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.448Z","timestamp":1782217575448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/theme/Wonderful/include/nopic.jpg HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5866\r\nlast-modified: Thu, 16 Jan 2025 13:22:06 GMT\r\netag: \"678907fe-16ea\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5866,"size_decoded":6209,"mime_type":"image/jpeg","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7d6128f87f8bed8f34cc4be04666d9c7","sha1":"d1b0f373860ea60b65b0d2f8ad2ac935a2342a2b","sha256":"4dc96e76556293149b23c2f0682577bda47c6089c320096e2ea27b4aa4f845df","sha512":"a3025fb18bfccfcf69315f60c97021237c66ed6840f06947339d257fc07ba37b1803543c3817cbee17748d6f9359ac2bc6ecd57ee27acc30342d1350de754944","ssdeep":"96:nSi7Pa0MzgSOjU3oLqajx6SBSI++ncLVWGoVjViJ700dHDViD8O7:nSi7PlQgSOY2qaFBSancL6jVM7JdVIL7","tlshash":"f5c1e054374a12967fb9c6c990830ad669e1d987f7eac339610c020c46c5d8e3f27fe1","first_seen":"2025-02-26T16:32:21.380987Z","last_seen":"2026-06-23T13:18:19.890029Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1297,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/image/icon/zblog.ttf?t4vkir","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:17.723Z","timestamp":1782217577723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_system/image/icon/zblog.ttf?t4vkir HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/zb_system/image/icon/icon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:17 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 298976\r\nlast-modified: Thu, 30 Sep 2021 05:48:34 GMT\r\netag: \"61554fb2-48fe0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298976,"size_decoded":299264,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, zblog      ","md5":"d9bba6b235dd715568966613b4af5f2f","sha1":"4299921c4f45a8fca606a0853676054076f4d50d","sha256":"088dac7102f6b61b3101ba040c2b6d798211dff40b565d20af85a4956f7d2ce0","sha512":"e47dbc67f3d6f097d6fb8ee9cdf6968a496f576eddfafe103418faa7df5f9e0ebfcfed8470c1706bb605fe0698f6e86bca6ae305c85ea4ad25a58af05cb4463b","ssdeep":"6144:AQDik6g8HWxbBJOc6DWvHctAcd8mfIKAy31ahCZbJ9yqdUKvb+frkfo7iMvXGlYP:A6i9/TK2vb+frkWQM6IlQFpk2A5luOBz","tlshash":"475408a793d3cf9ddc6747b9e9754aa254fdee08223e9d3ee1444c8af0248b08779610","first_seen":"2025-03-20T10:56:31.455122Z","last_seen":"2026-06-23T13:18:19.900803Z","times_seen":12,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/zblogphp.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.409Z","timestamp":1782217575409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_system/script/zblogphp.js HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Sep 2021 05:48:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61554fb2-1c24\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7204,"size_decoded":2890,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7204), with no line terminators","md5":"5e8d86eb2c5abc94804fd6176a35b281","sha1":"921d2cc4615a58a094ddbcc6366437a94508fc5f","sha256":"11b10a45b9fc3622b9a8eaf5181e0bd403af74ecfbbc9541cdce396a8e47b332","sha512":"6504e48f68d98800228db18dc63711b216c299dad8d95e57d0f014c18a24a2ffbc62f6cfe98f5d0152d06da577efb550c20bc947c08101ea3c94d659f572ea17","ssdeep":"192:msL4JVH9jIULy46KgHlQGwH0Dx5qjplLO:m/jIUkHlQGwH0Kt9O","tlshash":"2fe1315cf5c476a103ab30b4088f028a64fb17ae6011d998d264e4e46fbdf8b5623f3c","first_seen":"2023-03-07T23:31:01Z","last_seen":"2026-07-21T17:19:19.132641Z","times_seen":2602,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/b7ae37706000dc2abfae12441a116157-60-60-1.jpg","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.450Z","timestamp":1782217575450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/b7ae37706000dc2abfae12441a116157-60-60-1.jpg HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1532\r\nlast-modified: Sat, 15 Mar 2025 01:42:14 GMT\r\netag: \"67d4daf6-5fc\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1532,"size_decoded":1874,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 60x60, components 3","md5":"666b4a250e6376836cf29df44d3c2287","sha1":"fd36d7b08004f3de3f839a83ac941559a59f0f76","sha256":"bc606a5999eb64dcb45482121bf5738e2eac7b6b54fea0757eadef76d3330139","sha512":"02f5d74287fbb70778f1eb94580eb8ea68ae5c85fe73d2046f1a2435dff393269b0ea284ce5358ff0dd6bdde457c5549cced8c3e7fec96def1136988329c139e","ssdeep":"","tlshash":"fc31e92e0f416be0791ed1b648223c45f3eada5b7890c67c6ac649b0c5b05c49c4c4ce","first_seen":"2026-06-22T01:05:24.726508Z","last_seen":"2026-06-23T13:18:19.887815Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1757,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1295,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/63f1afa9ca2b9ba3349db6939502e0a6-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.460Z","timestamp":1782217575460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/63f1afa9ca2b9ba3349db6939502e0a6-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9495\r\nlast-modified: Wed, 01 Apr 2026 02:50:45 GMT\r\netag: \"69cc8805-2517\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9495,"size_decoded":9837,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"053dad0ef763d3acf939c1b9bd4f146f","sha1":"bd237b03dfd5c0efe184b6d7f61f9fa0c492fee0","sha256":"c956eaa869e27f175704bfb69d99c276e9c29a42702f5460eff3aa01d2b63ec6","sha512":"733fdc74296223dc341a682c1e940f68f2019e64ad9025bdb2f67bdc29758563f0bc5f3a8a6535f69b777dd6de6154bdd26a9277e90807514e92651e7d4f2c06","ssdeep":"192:QZwTEvYEy2UlDHXsXNQMvUsMgU4svheLBPknZQe9pnQEEV8sHalZ4ZF1fjp:1EvYH6yMvnqButeZFfEiAa4Z/jp","tlshash":"5312c0aef4a55dc15719d13dad93b9e13c2f09764ff9e79e0341a94c304b43193a580d","first_seen":"2026-06-22T01:05:24.753541Z","last_seen":"2026-06-23T13:18:19.891042Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1284,"receive":476,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/plugin/UEditor/third-party/prism/prism.css","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:16.755Z","timestamp":1782217576755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.css HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Jul 2023 23:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ade32a-1039\"\r\nexpires: Wed, 24 Jun 2026 00:26:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4153,"size_decoded":1857,"mime_type":"text/css","magic":"ASCII text, with very long lines (446), with CRLF line terminators","md5":"b723c2f958f530879d534e05628b401a","sha1":"2a7ba0076d94322373e6033e8e7d414c77b11592","sha256":"e82e0b58f5c11f55f08603ea35e2aa7612d4e5986e5cb6bc2d4c53e3c1c9c149","sha512":"f5537e2e51c8e8c210a639646fad3230e2180e5c5ad2597115b24d1253e73981469a2d3155e28b8ba38e77776fc6933a2ba45d0e9f00fd5876d7264f7d6e46fb","ssdeep":"96:FJpT8IVUVLK5oSXX1V1VIHvtVtVQnVAf5rVKHVlVaBkBABvBUBQBBOB9BlBWBnBb:B8dLK5oSXXzzIHvLLQVy5xK1DiQcpgQ5","tlshash":"958110219d7b159d30076a67e8f1b0243816aa19c993267cbf30d2909f43fdeebb3519","first_seen":"2023-04-08T15:33:58Z","last_seen":"2026-07-21T17:19:19.0719Z","times_seen":2066,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/avatar/0.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.426Z","timestamp":1782217575426,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/avatar/0.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1543\r\nlast-modified: Tue, 11 Jul 2023 23:18:02 GMT\r\netag: \"64ade32a-607\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1543,"size_decoded":1884,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit colormap, non-interlaced","md5":"ee5d41a3d66ad74f9f9f8071b3c8704f","sha1":"f95789aa835923681db418eba2dbbaf8e0ade62c","sha256":"d284115b6f0994410d2466ab471727d867c1c183dcdafed233c902ece5d76b18","sha512":"72a11cb2d40b0ca85e5e387520e3f57fb36806e800797a386fd56b6ca93651858f9e3b066efe33d9aa827049c92f1a8f9bf8e7c50300ff47ef558602d2bda88c","ssdeep":"","tlshash":"09311be6b77d46b2f5987bb1c9949251c0312e825085cb138502c1a7b735e06ef7ddc1","first_seen":"2023-05-18T11:31:11Z","last_seen":"2026-07-21T17:19:19.041194Z","times_seen":447,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101709175798902944137.jpg","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.432Z","timestamp":1782217575432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101709175798902944137.jpg HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 236953\r\nlast-modified: Tue, 16 Sep 2025 02:17:09 GMT\r\netag: \"68c8c8a5-39d99\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":236953,"size_decoded":237299,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x2341, components 3","md5":"b8d7dac7e12d9e16aa2e8ec27fc81aa9","sha1":"25f0b91497f2da3fb792c758a4550305e3ccd174","sha256":"1477202de1c30852b86ed17bebb25bfc69891b6fc5c837244ed86d27d1e125a8","sha512":"c2a7beda05e5fafe460db5d240a1aaa880371c4618d23c7342ea3e32b04a5616153cc100e3351fa998740022fcb5b214f8171c2283eac4eadb9ed849e9d96408","ssdeep":"6144:AUSZZz+y6F9SvlQ3Wv6vQoaV0cH1QDaG3j:AUChfI9oEQ6v3a6z+G3j","tlshash":"b934bc574e93c137a55ed0b40f10360c2486451947eb0bb5693d2afff36e28a0eafe69","first_seen":"2026-06-23T12:26:47.097317Z","last_seen":"2026-06-23T13:18:19.893416Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1312,"receive":821,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101709175798902996649.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.434Z","timestamp":1782217575434,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101709175798902996649.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 178113\r\nlast-modified: Tue, 16 Sep 2025 02:17:09 GMT\r\netag: \"68c8c8a5-2b7c1\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":178113,"size_decoded":178458,"mime_type":"image/png","magic":"PNG image data, 1080 x 836, 8-bit/color RGBA, non-interlaced","md5":"f9ad1fd20aa8a74179107158fa1191d3","sha1":"3152bf384a4645e93447bb32e9b1e3fbf773b20d","sha256":"b67e0d53d4589bc1373b29c991eaa6cdf9a7ebbcfd1e93339026709e744d6d34","sha512":"f80fd2cd6cdade9e96948f5571d2c52bc4359fcb78c68fa4fe8f486ab5ef3b53390c895a6e5ee828796b98ffc2c3c4207bdd95c78443000569e2ee25a4d6a0c0","ssdeep":"3072:7KGAGBTaQwoPOiCby7b1x+bF6aYWFrGlJTS3Irut5aA73ZVj6/0Fa:WGflmxab1xQUdldS4qt5aAxQ","tlshash":"b404010dd1ffd0810d6e2a6a6c858c2e276a114798fd513c6276fd5eae09efc1ab410f","first_seen":"2026-06-23T12:26:47.098353Z","last_seen":"2026-06-23T13:18:19.902699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2044,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1311,"receive":733,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101710175798903096763.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.435Z","timestamp":1782217575435,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101710175798903096763.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 277783\r\nlast-modified: Tue, 16 Sep 2025 02:17:10 GMT\r\netag: \"68c8c8a6-43d17\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277783,"size_decoded":278128,"mime_type":"image/png","magic":"PNG image data, 1080 x 1038, 8-bit/color RGBA, non-interlaced","md5":"c5a09a9b58dab6538b7e473ba5d1ae4a","sha1":"f825e26000b3b0f0cafcc33c914352b25650e968","sha256":"1379be7869118cbda86a610ee1271830af76afe8a123bf73ab43986bd5aa6280","sha512":"1abc1ebfbab2ae53c47ced5e45bf368d67796f57024c64038af7604bd0d1433a74bd5a256df7d5e0ec04eb2f70662bb0300213b0e106bd2b74bbd14abbb39cf7","ssdeep":"6144:JLgkscA0wkSlwIsOcz0RU1iNKNxqIhUl/Bb/QbGNegrmtKRKnF:qXESlwSra1aKtCl/BDiSemm0W","tlshash":"8b4412c2c823d893cd7f60b1d4a9f70a6e952c8f19c59cb1da7a9c6dc30fe184758a58","first_seen":"2026-06-23T12:26:47.09944Z","last_seen":"2026-06-23T13:18:19.893964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1309,"receive":834,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101710175798903061270.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.439Z","timestamp":1782217575439,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101710175798903061270.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 407563\r\nlast-modified: Tue, 16 Sep 2025 02:17:10 GMT\r\netag: \"68c8c8a6-6380b\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":407563,"size_decoded":407908,"mime_type":"image/png","magic":"PNG image data, 954 x 1178, 8-bit/color RGBA, non-interlaced","md5":"4e4a5a696d6943cde5e750c63fa4accb","sha1":"8eb1e278249a398bd31d07a656076d9f9296c203","sha256":"05bac796bc69cb8193daf3eb72f54b1b48cf6aea0b36a935c47ac8c51dbada27","sha512":"0d25f6ea7f29de1d04d123870592db0936b40efa6cfe5db957984efb0b0de25b008348e531e4f879d930351b5ead2ec20952e9ee7f1f3ed30f96f3bf3784d3fe","ssdeep":"12288:V6Xa/snHtalNET3MONDg2PkFdXhR/ePHK:YXaaMYDMO6sEXhRkq","tlshash":"bc8423ed67c9dbb35ba63b61eb3e1978c59d202c711d7e16c519738003a3f853a6288c","first_seen":"2026-06-23T12:26:47.100548Z","last_seen":"2026-06-23T13:18:19.897559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1305,"receive":896,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/44c0c64973483e0ef19e0abc1b2739ba-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.451Z","timestamp":1782217575451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/44c0c64973483e0ef19e0abc1b2739ba-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 4043\r\nlast-modified: Tue, 11 Mar 2025 00:27:29 GMT\r\netag: \"67cf8371-fcb\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4043,"size_decoded":4384,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"79a04e7b805617ce1d7f2e728261a138","sha1":"c768af780ccfbdea640c4d0ba31a90b744400158","sha256":"5cdb1d28cb94db41ef9fe3400c72fe86de9e4fb04e879ab068d7b0c41b77c838","sha512":"3ce6809cb75c9da674904d19864324586150d039e17fe0b844b4512ce7430a0bcccb6b92b0ec4d695b4907d78c6d49947bdf4ace5364dfed6cacdfaaba1dce0a","ssdeep":"","tlshash":"7281904a9b85d44e0ccecdae60c767217d2c0d11437f7466fdb07ca66512ebe5ec4011","first_seen":"2026-06-22T01:05:24.760187Z","last_seen":"2026-06-23T13:18:19.900169Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1293,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101708175798902828080.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.430Z","timestamp":1782217575430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101708175798902828080.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 348659\r\nlast-modified: Tue, 16 Sep 2025 02:17:08 GMT\r\netag: \"68c8c8a4-551f3\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":348659,"size_decoded":349004,"mime_type":"image/png","magic":"PNG image data, 1080 x 2341, 8-bit/color RGB, non-interlaced","md5":"e2e4fb66d62b508ac53bcb691a20ebd9","sha1":"68ba0917b0ec3e11b7b361a8b19220448967a7be","sha256":"9c37321ed3d0e8c5b633da139c73463d0b69090a8ccfb151ff01eef0e5193d5f","sha512":"41e0c380b25798d60b7abf1e676b65abb71bc9c50b995f2dd8e147723cd7a8b53af72218b65045a92e0f42239e925de219038f3360cd8b58af8219158bd6e9e6","ssdeep":"6144:elLscHw/QPAunjgKD4UYhR4Jt69kpCUXdjkwg6/NuTFuB2vJQqmV7HXhDH:eqcH6QPhXEJkO8Vkwg6/NuTwB28V1H","tlshash":"4c74129c69a6dfc4e25d1270907b5b163b79239bd08e6077df64ebd14c8a39034bbca0","first_seen":"2026-06-23T12:26:47.102454Z","last_seen":"2026-06-23T13:18:19.89286Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1069,"receive":1058,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/bybit-zhuce-2025.html","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T12:26:14.679Z","timestamp":1782217574679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /bybit-zhuce-2025.html HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\nx-xss-protection: 1; mode=block\r\nupgrade-insecure-requests: 1\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30144,"size_decoded":7899,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4501), with CRLF, CR line terminators","md5":"98beec4c32c87da0b775a9ec8e3a0ef1","sha1":"c0453e405091ac2133b53c5c444b16f1bf981497","sha256":"3a743f2f18b5aa060576fe1c32856f3d7ebfee99c24f8b6430e2bd9e864cd0d8","sha512":"1de6ffa49267edfdcd4b1773a7c7b953eaaccecfaae971772f85cc742e7b5dd4ec7afe91f562b12cf44f4c8e677a9d38d423aa961cc130df7ba3a38a2f1e3575","ssdeep":"384:CKnAvcaRYaGr3tu2D4cBuAaAETaEUx+6Zho:X0cwmEcBITaE7","tlshash":"a1d273f283d7586b0632c2d4d274a758f942651fca83ce4c79ad1a9fbfd5e94980320b","first_seen":"2026-06-23T12:26:47.103541Z","last_seen":"2026-06-23T12:26:47.103541Z","times_seen":1,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":59,"connect":272,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/style/style.css","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.396Z","timestamp":1782217575396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/theme/Wonderful/style/style.css HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jan 2025 10:37:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67878fe6-5dba\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23994,"size_decoded":6696,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (640), with CRLF line terminators","md5":"4ec3ed375bd34bacd87d07a5110045b4","sha1":"526590d10f3dce4c7393b8c4fa2a9f8783a77ae8","sha256":"874a0c023b222239c003e7fd5606ccba5312c6a260bd51550ae3efe191a3a1fe","sha512":"1f4754d870863676e69032eb784a527495aa7fcec401c54ce017465655a32f0c110678ded79e647d242aa0c574d1473b44a586a8de92448552ad5fec5dff2a8f","ssdeep":"384:Q2ZoCP3V6yeswPQkxQC7Jf6DeV6FCUSIq2Xl:Q2H3V6yJKNfSF5","tlshash":"61b2983599402128f037c715e6d66edc7e2c8173b2270fadf7793729ca476ad2222785","first_seen":"2026-06-22T01:05:24.740424Z","last_seen":"2026-06-23T13:18:19.88669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/jquery-2.2.4.min.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.406Z","timestamp":1782217575406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_system/script/jquery-2.2.4.min.js HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 30 Sep 2021 05:48:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61554fb2-14e4e\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85582,"size_decoded":33947,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators","md5":"710458dd559c957714ac4a8e95357eb5","sha1":"f694238d616f579a0690001f37984af430c19963","sha256":"b409c14a10b4caad6b54844aa63a5faf748b83eecc2dd0d4fb1d913f8de55365","sha512":"282d65828a43bfe50fe0f9aea8bca3838ac1b5250e7c7c359c066e0428aa723f001d31c2463681b2ad6816a49a8571bf9f3ae29b2dc53adf1bbd7d5c4471322b","ssdeep":"1536:fYE1JVoiB9JqZdXXe2pD3PgoIiulrUn6Z6a4tfOR7WpfWBZPBJda4w9W3qG9a98N:u4J+rlfOhWpgCW6G9a98Hrp","tlshash":"3583c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:03:07Z","last_seen":"2026-07-21T17:19:19.058516Z","times_seen":12799,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/script/c_html_js_add.php","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.411Z","timestamp":1782217575411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_system/script/c_html_js_add.php HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: application/x-javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nproduct: Z-BlogPHP 1.7.5\r\netag: W/64ab02760bb327fe3907638d774bd954\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4527,"size_decoded":2108,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1266), with CRLF line terminators","md5":"64ab02760bb327fe3907638d774bd954","sha1":"d78d77e5dfcea80d684133bb71f6de45dbc070cc","sha256":"051aecb52b87426b8b8ee86663f66777da14cc69456cbf18ff7443923af7fc1f","sha512":"bc33c3e005b38823f11470c049b66d0b276e9935196972d94e415495bf7976b3976fe956a44b15d37be8b7eb58d9228ac18e72f36c37f8368c6168aae9f81b52","ssdeep":"96:6/iV06qZuiMRd1BhXJnbZ2THKrOeiMMKDg8E:6Cvf1BhXJnNAH8iMNDLE","tlshash":"0091d7545a5601a7143723b7d8af5608fe63066b4000cc2afe7c40682f71f849123fbe","first_seen":"2026-06-22T01:05:24.751469Z","last_seen":"2026-06-23T13:18:19.899128Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/script/Wonderfu.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.418Z","timestamp":1782217575418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/theme/Wonderful/script/Wonderfu.js HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 15 Jan 2025 10:37:26 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67878fe6-c78\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3192,"size_decoded":1697,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (731), with CRLF line terminators","md5":"535c948b88d22656e5f1e7ebd8efaca7","sha1":"225e657631fc9c835f0eefb24d395ea0b3c9d1ba","sha256":"f801b83135845e7e5df1f4e56d7cca3009b7e9fda53aff3a5a7d04ffa1b23650","sha512":"7a3f3ce55b86d1e0fb00ea92832c2d0d2a91f1d1eb6cf63f231f1c7d52a2f6c6987621a841b3366dae8fecaa715d2655360cdb48071a460ef1d09106e3d2bc01","ssdeep":"","tlshash":"e1614198f09de259e3fb73344936b008da76140f81088e90fc6d4dd06f72b9585a3eb9","first_seen":"2026-06-22T01:05:24.720123Z","last_seen":"2026-06-23T13:18:19.88726Z","times_seen":4,"resource_available":true,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101708175798902829739.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.428Z","timestamp":1782217575428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101708175798902829739.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 72624\r\nlast-modified: Tue, 16 Sep 2025 02:17:08 GMT\r\netag: \"68c8c8a4-11bb0\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72624,"size_decoded":72968,"mime_type":"image/png","magic":"PNG image data, 1080 x 600, 8-bit/color RGBA, non-interlaced","md5":"21b0cb07fe6ccadb7f2ac90c84705ef6","sha1":"180c9b88f83e7ee021551dfb5d680ba8d0d38f9c","sha256":"a00339a2405ac3199466b359d4707a9ba803ce8493d56b5fb07f0a37ff4221b8","sha512":"247bc8713373e932ced5bdec436eae6954f4eced68332d04e47491936ddef9c1d0ed69a2aaae00ab911a00494de4e9d146d69168fbec8534ce3a7cf1f79abbc3","ssdeep":"1536:8APFEOUvcnbRy/xuL/HqVCxaEGDY1r3M1nJ7Fyd1vH15eZoxmNmxsTly:ZzbRy/xUHqsahM1bM3ZGBvvmN1Tly","tlshash":"d063e09b969bc051fd2f3ad0216618cad944020598cf1efc997dd1afc39ba2837a1fc4","first_seen":"2026-06-23T12:26:47.108186Z","last_seen":"2026-06-23T13:18:19.897039Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101711175798903138617.jpg","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.442Z","timestamp":1782217575442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101711175798903138617.jpg HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 232576\r\nlast-modified: Tue, 16 Sep 2025 02:17:11 GMT\r\netag: \"68c8c8a7-38c80\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232576,"size_decoded":232922,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x2341, components 3","md5":"d67956bed527e4b27806f6c58d1358ab","sha1":"b5e121df45e9da81483fdb913075abdd981a620e","sha256":"2290672be7daa8696fd632d525da43e8ef1a70d3d9b410c91a18cb2464ac8637","sha512":"785e6c546884ebd51d45ec858e2549c616783839cd1195c74df96cc8095f14a707614de560910d78564b7fd351892a317bb989db4601be944a3078767bd3d43a","ssdeep":"6144:YPB0UpT42dxBgB3gbSxPlUm6Bx6ASNz4Am:YPB0OU2dxBgBQMPlUm6Bx6AS9m","tlshash":"b834bd278e43e0a3b52fd2768a44391a285711984ad75725386d3fbfb7bd00f0deb891","first_seen":"2026-06-23T12:26:47.109103Z","last_seen":"2026-06-23T13:18:19.895959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1302,"receive":871,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/include/nopic.jpg?1737106223","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.446Z","timestamp":1782217575446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/theme/Wonderful/include/nopic.jpg?1737106223 HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5866\r\nlast-modified: Thu, 16 Jan 2025 13:22:06 GMT\r\netag: \"678907fe-16ea\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5866,"size_decoded":6209,"mime_type":"image/jpeg","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"7d6128f87f8bed8f34cc4be04666d9c7","sha1":"d1b0f373860ea60b65b0d2f8ad2ac935a2342a2b","sha256":"4dc96e76556293149b23c2f0682577bda47c6089c320096e2ea27b4aa4f845df","sha512":"a3025fb18bfccfcf69315f60c97021237c66ed6840f06947339d257fc07ba37b1803543c3817cbee17748d6f9359ac2bc6ecd57ee27acc30342d1350de754944","ssdeep":"96:nSi7Pa0MzgSOjU3oLqajx6SBSI++ncLVWGoVjViJ700dHDViD8O7:nSi7PlQgSOY2qaFBSancL6jVM7JdVIL7","tlshash":"f5c1e054374a12967fb9c6c990830ad669e1d987f7eac339610c020c46c5d8e3f27fe1","first_seen":"2025-02-26T16:32:21.380987Z","last_seen":"2026-06-23T13:18:19.890029Z","times_seen":40,"resource_available":false,"data":null}},"time_used":1753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1298,"receive":455,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101711175798903116617.jpg","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.441Z","timestamp":1782217575441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101711175798903116617.jpg HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 108027\r\nlast-modified: Tue, 16 Sep 2025 02:17:11 GMT\r\netag: \"68c8c8a7-1a5fb\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108027,"size_decoded":108373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x2341, components 3","md5":"104cde7b87c0651c67ec5613c63d1d7b","sha1":"e45f9feda7ba22226925c78df3c1c0d3100175b7","sha256":"f77a442f3ec548960d6a988bb661ba3661ab4a476bdc3eebdb6dfb66b15e5eb2","sha512":"f7f7f2278a7c038efab8c5e546bcdf64f6193db310085aca10138a09a9e84850eae2b6952a1efa4a04ef2dc9345c47284a3a933a7bea6fdc5fbd28597da509ea","ssdeep":"1536:gjWS1702H+hd1mGqsdwUZZZZZZnMfrgsiB07KluXgg0fdfaIEMWaT:gj7172dJbdMfrAB+rFaDT","tlshash":"afb3f1871b503fdad8cc6ff29873c23627ca28ce76d545368048496495f6fc8abbe445","first_seen":"2026-06-23T12:26:47.110149Z","last_seen":"2026-06-23T13:18:19.889415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1304,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/6ba51f71fad06241e3a096dbbcd900d5-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.453Z","timestamp":1782217575453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/6ba51f71fad06241e3a096dbbcd900d5-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 9469\r\nlast-modified: Fri, 29 May 2026 02:56:22 GMT\r\netag: \"6a190056-24fd\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9469,"size_decoded":9811,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"41df671195da932dc43731b13a36ba45","sha1":"3ca7ba56c29e48cfc37e9bd6d0c929f4a87eac3a","sha256":"3d603927d45cb82a7be256dc4d9dad6f54c72329fcb5e97e0abfa9f42a8092d7","sha512":"9efb8aeea99ecadbaa291f48eb3e8dbe895e3f480a07fe5911400c64e2a38dbbde3252f3647d229b444dbfe3b66b9cb9761a198e7e785bf8d89ff37c54bc3cf5","ssdeep":"192:xqgtJfWS4Cozf+5PXL2I7pUR8xfAzGlixiAcIX6Cjrn6uJJ8hP55:og/fWSM+5iI1p+GlRAceHVJJ835","tlshash":"8c12bf3b9b3421bd6225144fbc560275b02536774c7eca35a7097b6b7b9cbc2659034c","first_seen":"2026-06-22T01:05:24.746936Z","last_seen":"2026-06-23T13:18:19.894503Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1291,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/eddd37164edd2d3646479855e02cf9e8-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.455Z","timestamp":1782217575455,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/eddd37164edd2d3646479855e02cf9e8-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 3941\r\nlast-modified: Fri, 29 May 2026 02:52:17 GMT\r\netag: \"6a18ff61-f65\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3941,"size_decoded":4282,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"404adcce1edd391e1502cd12ae750294","sha1":"8283486edfe89d579f9a0eee8fbe548f61c70760","sha256":"57b5ac30cefb29d6685ed2e94f062040b766549f49e2e11bea96aa89db20f6bd","sha512":"666ccaea016ff619b1e1380ab4c4d3f831c41f26d37a7b4be17c3e3d5bfe8359be654f498bbd75d57881ea8369031166fec1f92c3625bf30a554f2d313b72b31","ssdeep":"","tlshash":"b3818dc781b756cca84f66331a77ca2d4d373c028081199ac7388527933066779363f7","first_seen":"2026-06-22T01:05:24.732382Z","last_seen":"2026-06-23T13:18:19.90132Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1288,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/4658b094eea5bba1026a4c6211f42426-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.457Z","timestamp":1782217575457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/4658b094eea5bba1026a4c6211f42426-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 1721\r\nlast-modified: Wed, 01 Apr 2026 02:55:28 GMT\r\netag: \"69cc8920-6b9\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1721,"size_decoded":2062,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"5347ebfdc43512e356fdcba73478c82f","sha1":"b45d55d1968764bd1c239f54efeca65a84b9fbf7","sha256":"e79771aa979d57855c8853fe979c99eeaa8446b08e1c3bb0de7a052da0f0f7f6","sha512":"4bff8a9c03cae7d7ea6e238ab85669d0ede951bbf6a3d158d7617de3134de9e1e319863efb8348c1ed27f484875310dfca3cabe801e6966f6cc600b6153dcb90","ssdeep":"","tlshash":"84311803e1bcf06cda6102740388c5e8931b4f9a9b883a24008cd03154eaab6379b2e7","first_seen":"2026-06-22T01:05:24.735194Z","last_seen":"2026-06-23T13:18:19.90186Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1288,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/cache/thumbs/e7f9b85d7f90f72b30996f50393aee36-60-60-1.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.458Z","timestamp":1782217575458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/cache/thumbs/e7f9b85d7f90f72b30996f50393aee36-60-60-1.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 2935\r\nlast-modified: Wed, 01 Apr 2026 02:54:28 GMT\r\netag: \"69cc88e4-b77\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2935,"size_decoded":3276,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGB, non-interlaced","md5":"9ed8a974ebf747aa8f0cf2e12c3acff5","sha1":"dd4e30af8871a9ed6355fb81f720a69260299def","sha256":"9a335e4dca9048d28211f1ed9e01c95555d31719cdaf029a209a2d5f0f4b57d3","sha512":"c6f54d59ca1d573b7717549f79c4292c6cee50d91168501aeb837f99438b2027f964c8eac041e70c8393043d32b21c9f01ac35c9af7518409ad981fac0275df6","ssdeep":"","tlshash":"d2514cb15503358169599b6610737ecd7caa641943b29b928bbeccc67142f070c1d9e5","first_seen":"2026-06-22T01:05:24.73823Z","last_seen":"2026-06-23T13:18:19.898024Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1286,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/plugin/UEditor/third-party/prism/prism.js","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:16.754Z","timestamp":1782217576754,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/plugin/UEditor/third-party/prism/prism.js HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 11 Jul 2023 23:18:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64ade32a-eecb\"\r\nexpires: Wed, 24 Jun 2026 00:26:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61131,"size_decoded":25393,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4799), with CRLF line terminators","md5":"436e8870ba117885ef700bbeaf798ba6","sha1":"7b242c9b1698d8cf69310101c64535c442b97949","sha256":"5867cef615756cb75b523c11e29d88f770ddb40fd51bc39cd60e3ba86d004fdc","sha512":"bd5f55dcdeb34fa64f49cc8badbe57a68cf0b2aa9d2799e31e998a44018352ee8d2326800975c914eb951069bf7024e9197aefa08e1a16e0c038aae1bf8acd71","ssdeep":"768:m5Y2fNvMbzlD2nW6uY45AHdw7UECX3b1ivdpMOxkKda2U6PDFDnNLDSAkvZrE/Jk:IYKEvN2W6uY4EwV1l42vd3gZAccRRx78","tlshash":"de535cbc5eb73d010ac7e1a6f8a29500e9221975d929791bf7e8d648c0f390742d3b6f","first_seen":"2023-03-07T12:24:55Z","last_seen":"2026-07-21T17:19:19.042815Z","times_seen":2154,"resource_available":true,"data":null}},"time_used":850,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":850,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bybitget.com/bybit-zhuce-2025.html","fqdn":"bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-23T12:26:13.478Z","timestamp":1782217573478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /bybit-zhuce-2025.html HTTP/1.1\r\nHost: bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:14 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://www.bybitget.com/bybit-zhuce-2025.html\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T17:24:28.523367Z","times_seen":17427003,"resource_available":true,"data":null}},"time_used":1192,"timings":{"blocked":-1,"dns":93,"connect":271,"send":0,"wait":274,"receive":0,"ssl":553},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/theme/Wonderful/include/favicon.ico","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:17.858Z","timestamp":1782217577858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/theme/Wonderful/include/favicon.ico HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nCookie: timezone=0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:17 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 580\r\nlast-modified: Fri, 17 Jan 2025 07:32:01 GMT\r\netag: \"678a0771-244\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":580,"size_decoded":851,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"d0b7a40bf06656b9529a7f88b40c1c68","sha1":"dc0ff0386a1e765b5c084ef3716c7ff6990a4f45","sha256":"020e22f62ab1bba6a518d88774bd2bafe2ac256fffe753a0001b12866e205ecb","sha512":"4369e1bd25af2f18d9e90b54c5925bc6ba2f3110cb91fd29673d3d3fae3565a8d9da6a08b0816d21be369874e50df5bcff79e9cb229c40671ddb7fbb37692f72","ssdeep":"","tlshash":"c6f00e57bad83a77ee02273281610ef11f26a68125a5cec8028456d130ff2d18cf10d9","first_seen":"2026-06-22T01:05:24.762861Z","last_seen":"2026-06-23T13:18:19.891528Z","times_seen":4,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_system/image/icon/icon.css","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.399Z","timestamp":1782217575399,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_system/image/icon/icon.css HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 30 Sep 2021 05:48:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61554fb2-fb56\"\r\nexpires: Wed, 24 Jun 2026 00:26:15 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64342,"size_decoded":9909,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0cc96fbd97cc5a86b0a2da2ca4010095","sha1":"967c349aee5bafb4446ce67d65e243abf39b58eb","sha256":"3c4c02189fe9d3aee878c48915a193d7015e5366d2dd36db2440a9f1c762287a","sha512":"069e745c1e8c45bfbdb3d15bdcacc0e96368e515b7afb403dbfb6a818b76057ccc05f6c5cfb8d74ab694745984fec8d0873ff16b0d05dc70ac570f79219f30bc","ssdeep":"768:yOfos7rKtrusS0bbYDrgiNu1i8y40krV8ha20DVa:hsS0bsDrwVy4brFI","tlshash":"7853cafcd97c45911b21d9e1a3422a23af5da3f8dec36c9af213688c97db2554082ddc","first_seen":"2025-03-20T10:56:31.478503Z","last_seen":"2026-06-23T13:18:19.888347Z","times_seen":16,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.bybitget.com/zb_users/upload/2025/09/20250916101710175798903061449.png","fqdn":"www.bybitget.com","domain":"bybitget.com","tld":"com"},"ip":{"addr":"43.132.136.166","port":443,"asn":132203,"as":"Tencent Building, Kejizhongyi Avenue","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.bybitget.com/bybit-zhuce-2025.html","date":"2026-06-23T12:26:15.438Z","timestamp":1782217575438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bybitget.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Jun 2026 04:00:01 GMT","end":"Mon, 31 Aug 2026 04:00:00 GMT"},"fingerprint":{"sha1":"BC:F8:AF:57:E9:CE:7B:31:6E:4C:03:9A:82:31:78:B6:7F:83:4B:E2","sha256":"00:E0:DF:AB:A4:31:FB:46:E9:7B:37:72:65:07:2D:26:6C:30:0E:8C:31:A6:9B:F2:27:49:BA:F5:BE:CF:7E:D9"}}},"request":{"raw":"GET /zb_users/upload/2025/09/20250916101710175798903061449.png HTTP/1.1\r\nHost: www.bybitget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.bybitget.com/bybit-zhuce-2025.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Tue, 23 Jun 2026 12:26:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 204814\r\nlast-modified: Tue, 16 Sep 2025 02:17:10 GMT\r\netag: \"68c8c8a6-3200e\"\r\nexpires: Thu, 23 Jul 2026 12:26:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204814,"size_decoded":205159,"mime_type":"image/png","magic":"PNG image data, 1080 x 824, 8-bit/color RGBA, non-interlaced","md5":"2a6d2b4eed7e67598009cccd8f88e08c","sha1":"6b1cbb3856af76d63d7f5fe3836d7af0c16cd6e9","sha256":"3c9a0503e148df1e369608e2c7ec8a7cf64007680e29af23eeb54262328752e1","sha512":"1a46712371aeb06a3e301db91a221ed6b32f9d8e8cd213a0996c0601284023360c765b99fa0680c0032c86fa2dd407bd32fc9520dc85f6ddb8b3d2e7e44391cf","ssdeep":"3072:Zjf35LVJcK6A2EsYEnnJbJeDaR3+6yFKEs+01ks5MJ68DLsEAJU6ey:ZRLvcNA2+EJFe+t+6mKasOx4XJLr","tlshash":"3b1412f958b2c2537e174277aa544f8e82e7204395d952bccb48ba2c1e0afbc56c47c7","first_seen":"2026-06-23T12:26:47.11869Z","last_seen":"2026-06-23T13:18:19.903276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1306,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-23","alert":"Sinkholed","trigger":"www.bybitget.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-23","alert":"Phishing Block","trigger":"www.bybitget.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}