{"report_id":"f413555b-26be-477c-b6b2-c022056991bd","version":0,"status":"done","tags":[],"date":"2026-10-09T15:59:51Z","url":{"schema":"http","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":0,"asn":54600,"as":"PEG TECH INC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"title":"JD030 性球大戰","dom":{"size":37940,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (617)","md5":"daf11e30a5933acfcefd941a4cf11e9a","sha1":"1a9822da52d40e5bff7d9676d109cc2805e53f93","sha256":"f35fe5dda0cf60a61877678ed9c2d30a8d3ce0791a74aefa69b8af939a37b9a7","sha512":"7514ba7c4d76c1b3228de73d569c5ec61e7c8391d14df40f751278aa462b919ebf7370696acd881c223b9d26a5411e59c28c39957728cd8dbac057265ba730dd","ssdeep":"384:cbc7095ixBBwfoniI6j7zro0+QpW7GHTH7eaH7uG1YWIONaN7erArdrhrYrsrWr9:ExPkbPMnPlcCo9Hw6k","tlshash":"e7038572a5cf0d7b302282cbc8ac6338105f9d3ed9614c5df6b351ac8786ce6665b2d9","dom_hash":"domhash464050d312f2960b763dba99aede301d","first_seen":"2026-10-09T15:59:59.069265Z","last_seen":"2026-10-09T16:00:16.056964Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":0,"asn":54600,"as":"PEG TECH INC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-13T15:59:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bw-bybit.com.cn","ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"domain_registered":"2026-05-16","domain_rank":0,"first_seen":"2026-10-09T15:59:55.146485Z","last_seen":"2026-10-09T15:59:55.146485Z","alert_count":46,"request_count":46,"received_data":587787,"sent_data":30615,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dfb0eb78f7946de987aa1bee874f6a87","sha1":"7d727fc9b6f9665fa4b6f07f07dfaaaba8bd31bd","sha256":"c9caddff08dcc9e24ee3a4da927c894b0c8160158ff32aef0293a90cf4fdc983","sha512":"e6473a33e2bfc61b78d6349929eb1a47ce7c8f71ef4c266d4518e4244cc65034ceb4c828eda167abd8b08d03cae3cae2e2a47c48d09dc977e73df639d2e1953a","ssdeep":"","tlshash":"4df0c92e7a6b5070687302abc77ba3c1f48040399800d481a884cc8caee0f412c669cc","size":526,"data":"","first_seen":"2026-10-07T08:44:42.967129Z","last_seen":"2026-10-09T17:29:32.142736Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ba4a0637fb451769359d8969005a96e","sha1":"25507408abf5a42a11d9eb020feda1e1fef93c38","sha256":"ca6c135f2ba4a8c7fb4fa535b6a00361631700532fd3d32786410a3531e4acb6","sha512":"d9628ae6b5274e8a8fe05091586c9c405f16bd433bc15cc4b8862a54cfa1038766fc646f8a3b895ccfca861773a57b41f8333510a5a05b0745c56c3c7bbafcf4","ssdeep":"","tlshash":"6df0c05e7d42e120a6913d2a23bbe99ce9dd04295009c80747d9c29d6c28ff94223608","size":548,"data":"","first_seen":"2026-10-07T08:44:42.968101Z","last_seen":"2026-10-09T17:29:32.144009Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/real-visitor-stat.js?v=5","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9837cd3106fdfa1378481197a3de530","sha1":"477f897f79a64c6fea0bb01fa4134550366737d8","sha256":"b2fac051fe734a412e0a7a11c8f9e96dee4cb5135b42274e2913c467ce8ab38d","sha512":"bc7274af846e2234ad1de9afb4c275648d3626a88d295be041889ef17e13dfbdd074af09a90acde9e8f52ab3902ae2a7b747e61a5abc3ff3dc744307247e20b2","ssdeep":"96:OpacGuurwau2am9PMaT6KZgNnuS4T/IeEyLyXAwkyJ:pc9uQ2aeCnuSDyLyXAPyJ","tlshash":"0091cb981dd2217a40b3a13e0fcfa054b272d157158968203ebdc3747fea97e8172ea9","size":4239,"data":"","first_seen":"2026-10-07T08:44:42.905542Z","last_seen":"2026-10-09T17:32:38.439151Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bw-bybit.com.cn/Php/Home/kakaxiaikakaxi.php","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.042Z","timestamp":1791561498042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /Php/Home/kakaxiaikakaxi.php HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, no-store, must-revalidate\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":472,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2JjNGRjMjI3YzkzMjFhMmRiNTE1ZTNkMzZmY2UzZGUzLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.052Z","timestamp":1791561498052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2JjNGRjMjI3YzkzMjFhMmRiNTE1ZTNkMzZmY2UzZGUzLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5818\r\nlast-modified: Fri, 02 Oct 2026 09:31:18 GMT\r\netag: \"6abf79e6-16ba\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5818,"size_decoded":6154,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a1d1503c57069247316ed4949b669b8c","sha1":"b929111a9742c9fbbcf0a025dfc50a955f0ca7c8","sha256":"511b56f556848977e98a99898e0c1399a88de3495575b23033df9afd4b5c6a08","sha512":"376175013e61223f5e2dd0db662169e0dc885c5cf00fc2c294bf2945dc47177757c6293986d870efdae7bcf9c79312eee72d7fd9e84836851784794694d3fa84","ssdeep":"96:JTBFXQD6cJeHijJWefASPbxOdKt8S193qyk2wKRm:JTBh9cJeHiEGASPVOdgpWyk","tlshash":"82c18d2de9f446cbfa3b2cdebdd350a091b2d6e0c06eb8844903eb3350119a1d79d803","first_seen":"2026-10-07T08:44:42.918607Z","last_seen":"2026-10-09T16:00:16.079642Z","times_seen":3,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2FiY2YwMTkyM2FkYzNlZTdlNGE5NGRkODc2MjAzYzFhLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.071Z","timestamp":1791561498071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2FiY2YwMTkyM2FkYzNlZTdlNGE5NGRkODc2MjAzYzFhLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2150\r\nlast-modified: Fri, 02 Oct 2026 09:31:23 GMT\r\netag: \"6abf79eb-866\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2150,"size_decoded":2485,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d4b5a0a8c8338787e2db95c1dcca1097","sha1":"3040a317bd068e58854778cc5a992905fdeedf48","sha256":"6e407c68cca348cc835cff60bed3e0550734f8df5cf64b24471d3899b5df8baf","sha512":"2a8e10494f1ee027b5b307ed2c0fbd2c8b9743870ca206c6d03df7aead2d2ddc7d7ad1b370c8ebc5074b839404c692f564c4f5d58e9d016f75a33d346c86a942","ssdeep":"","tlshash":"c3412c99f7c36ac55ee6512c4e641c522ab1c7bd2ee2a4af4f8c8dc6481d2150ac055b","first_seen":"2026-10-09T15:59:59.091879Z","last_seen":"2026-10-09T15:59:59.091879Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzM2MWZlZWMxYTMxMjczZTRjODJkNGJmNzk3ZGI4Y2EyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.078Z","timestamp":1791561498078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzM2MWZlZWMxYTMxMjczZTRjODJkNGJmNzk3ZGI4Y2EyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2028\r\nlast-modified: Fri, 02 Oct 2026 09:31:31 GMT\r\netag: \"6abf79f3-7ec\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2028,"size_decoded":2363,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5ea018871aa8cb9b22571470dbbea7e9","sha1":"d5ba73f4769178260a6becc7c04f3381e5d091bc","sha256":"91e97b7697e633fe004d10eb5d7a531a91fa2d73b1e8c5bca6ddae654e7cdb49","sha512":"5cb992a0f0a95e5099e9696a0d489ff479c9c760cd2e4d04758f11a354de67e12462393e42e0bd07111a3a416d998ba46337895f93cef0a59b3d20ffc7c988e7","ssdeep":"","tlshash":"054108f122834644d571097b254e35607a1c53acc0a3719dd8c2aea6a721b7ccf6be31","first_seen":"2026-10-09T15:54:57.166658Z","last_seen":"2026-10-09T15:59:59.100017Z","times_seen":2,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzI0ZGFhMTAyNjM4M2ExN2M4ODcyODUyNjEzNGU0ODVhLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.081Z","timestamp":1791561498081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzI0ZGFhMTAyNjM4M2ExN2M4ODcyODUyNjEzNGU0ODVhLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6444\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-192c\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6444,"size_decoded":6780,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"391cb7a852a9c1d49b768781fdf1996f","sha1":"c760c1bfbdc6fc2755c049c2e8980792a62b88b7","sha256":"fb58504f7ff7e4298d4110054c474b2188ea56c54e12d50395810c9a4d61b3f1","sha512":"fdd4beb198be1bb19f6ca39c464d6043e927f9e45006151da7da57ebbff02152fcc8cff6e227892d022e988ad292ef155d738863660df0d67489582ef5852f39","ssdeep":"96:mr9F2sz9AED7vtuUO3yUVfroC3cy7NQFPpGfIuKBu//5n:mr9F2sjD7FuUOCUhrf3j+FPpGekd","tlshash":"78d19d500b10b87b8b76cbb5bb18c64072c96220ff768afc06bd490ee64906aff3441c","first_seen":"2026-10-09T15:59:59.114345Z","last_seen":"2026-10-09T15:59:59.114345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzcwMDc0MWZhOTc1OWY4YTRjNTNiMTY2ZWI1ZjQzYmI4LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.083Z","timestamp":1791561498083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzcwMDc0MWZhOTc1OWY4YTRjNTNiMTY2ZWI1ZjQzYmI4LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5084\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-13dc\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5084,"size_decoded":5420,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"499d5a72084d37fa0daead48c84ec707","sha1":"2bddb25998eb19ce3fa543f02a91bd67d9ee0c90","sha256":"265b95a26ebd2a286bb348ac7e5cb2fea54a35c0c82405ab1e6809f3f60fa5fc","sha512":"7d717a08b78af50807058b1a6d01ed5af187b667ee161af933f76d5d6ba601e09fac7a89ccbe58f16d0713fbd8aa93526ceb4697d9abeb2c1de71aa191f90214","ssdeep":"96:nnjPAK15IyZpCJ2Y9OvM7JTAV5PyUBc2nTwQLMYnqI2jlWHL/7W/6yIQl:nl5lCItkZAV5PvBzn9dAEHb7aZl","tlshash":"dba18ff6c6f3e10df11c0456ab2fdb065406e069106d2fc60bbb882714633fd9e15524","first_seen":"2026-10-09T15:59:59.124119Z","last_seen":"2026-10-09T15:59:59.124119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/real-visitor-stat.js?v=5","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.044Z","timestamp":1791561498044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /real-visitor-stat.js?v=5 HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 21 Sep 2026 12:36:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6ab124e1-108f\"\r\nexpires: Sat, 10 Oct 2026 03:58:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4239,"size_decoded":1845,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e9837cd3106fdfa1378481197a3de530","sha1":"477f897f79a64c6fea0bb01fa4134550366737d8","sha256":"b2fac051fe734a412e0a7a11c8f9e96dee4cb5135b42274e2913c467ce8ab38d","sha512":"bc7274af846e2234ad1de9afb4c275648d3626a88d295be041889ef17e13dfbdd074af09a90acde9e8f52ab3902ae2a7b747e61a5abc3ff3dc744307247e20b2","ssdeep":"96:OpacGuurwau2am9PMaT6KZgNnuS4T/IeEyLyXAwkyJ:pc9uQ2aeCnuSDyLyXAPyJ","tlshash":"0091cb981dd2217a40b3a13e0fcfa054b272d157158968203ebdc3747fea97e8172ea9","first_seen":"2026-10-07T08:44:42.905542Z","last_seen":"2026-10-09T17:32:38.439151Z","times_seen":12,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzhkYmEyNDJhNDU4MmZjMzIwYWZhMWM0ODFkNGNiYTkwLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.074Z","timestamp":1791561498074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzhkYmEyNDJhNDU4MmZjMzIwYWZhMWM0ODFkNGNiYTkwLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2944\r\nlast-modified: Fri, 02 Oct 2026 09:31:27 GMT\r\netag: \"6abf79ef-b80\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2944,"size_decoded":3279,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cba8f4ff34d55ae0044a0695e9bbca09","sha1":"43e8210f4498ac6170a11101e0c5e9fcee20d656","sha256":"e7d927a82552f9e5a9f7373d85f7016b74b18bf64d96eac99ffccdd688571480","sha512":"d4cfb42942432d7db0b4b0b7aa60674a2305c07f0d83ea1c7d70a568b7f59ce6e63c857183e94c008beb5f00a52d6ff11e2513cfa4cc6f62d1cfae3d042f1ebc","ssdeep":"","tlshash":"af512aae64935562f132314955b92dd04585c34e428cf64247fbe097a0fe627d28dd8c","first_seen":"2026-10-09T15:54:57.275823Z","last_seen":"2026-10-09T15:59:59.129783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzQ4ZjE3NjlhYzBiMTE4OTIxMjk3MWRkOWMwYThkMGJjLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.076Z","timestamp":1791561498076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzQ4ZjE3NjlhYzBiMTE4OTIxMjk3MWRkOWMwYThkMGJjLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2112\r\nlast-modified: Fri, 02 Oct 2026 09:31:26 GMT\r\netag: \"6abf79ee-840\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2112,"size_decoded":2447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8bb0ffb519f85d82e1bffbe4359d6dfb","sha1":"660408996afaff7e48c1a8ad5209f4e0cd4a5502","sha256":"b3b9a297799b3d97fe4020d5599738982d73e3bb20a4deb3569cfee3b548478b","sha512":"ad261440c1ac2505718c6487d6fb313a129fa88bf2f8913ff02adb7c88b8506e8d5bd7fc902f51c95f636179069ba3166385995167bf9612a3019038d169b16f","ssdeep":"","tlshash":"26413a04e2a71e76d3c93d1fac42c19a61449a56f639cf03c28bc574a02b5110e43f01","first_seen":"2026-10-09T15:54:57.236162Z","last_seen":"2026-10-09T15:59:59.133851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xL2Y4NmFlYjFhOGZhMGVjZmU2NTY0ZjllYWJjNjNlNWEyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.084Z","timestamp":1791561498084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xL2Y4NmFlYjFhOGZhMGVjZmU2NTY0ZjllYWJjNjNlNWEyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5898\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-170a\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5898,"size_decoded":6234,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60716b7c0c1d5f946d7306e7dde329a3","sha1":"daf691794c4daa04a1c6187e771dea807423d2f8","sha256":"38b519172bec7c12bb26aed7511ac76c81bdb24483129cb64c3c82ecc13f5b9b","sha512":"3ede264ba5fc151f1d28e724eaa7d140b6e46040d0866f269269afcb5fe1849e05775d9e41d92b6a5b819055bc3af80af3bfc5381e29af3ff28b64b9f898a965","ssdeep":"96:xPyliTtxc5cgazYka+YLBEMuAM0nbqPDhjOKBeDAmgzDaCf0D5/O+nuRZ6AsXY9x:9yABxKgzKLWAM0nqhjO9qz30D5/OvqAP","tlshash":"4ec19fafccf5fe96e2343ead670163429c00d5bc4509ce04b793324a652219b6e592fe","first_seen":"2026-10-09T15:59:59.138121Z","last_seen":"2026-10-09T15:59:59.138121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzQ5MDg4NGFmYmNlOTBjMjkzZGMzNTg3NjBmMzJjZjZhLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.085Z","timestamp":1791561498085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzQ5MDg4NGFmYmNlOTBjMjkzZGMzNTg3NjBmMzJjZjZhLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7258\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-1c5a\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7258,"size_decoded":7594,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"059b95519aa2192982b68744af241500","sha1":"64e086fcc230b62306956445d665605a99cf677e","sha256":"5309d266b1b8b2a8e065e6b216aec7f664d48cb341e6a8a8c6e47e4b1aaf0903","sha512":"a3056eafcad7b5b81265144c3055f75b094313194087ffa8644122529e87a4a00f566e79c4ce344cc4113ee0096ffaea07a88bc7523bbc0550d81769305b552a","ssdeep":"192:EU6zFzf0DoP0x+CI8k5f919GjAleuGj1X:2sc8NKfwcleuGpX","tlshash":"a5e1a0b658e2a53f6c5288d40373ee553c18df44004f8b39faa1bcb5b6408c9b7e2e51","first_seen":"2026-10-09T15:59:59.140786Z","last_seen":"2026-10-09T15:59:59.140786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":576,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xL2YyMWViMTM5NWMxOTE3YzJjY2JjYTg1NTkwYjE1NzM3LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.089Z","timestamp":1791561498089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xL2YyMWViMTM5NWMxOTE3YzJjY2JjYTg1NTkwYjE1NzM3LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6112\r\nlast-modified: Fri, 02 Oct 2026 09:31:55 GMT\r\netag: \"6abf7a0b-17e0\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6112,"size_decoded":6448,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"70425f7854bce8fa94109ee5a277954d","sha1":"786ecf48a5e0d2747263ea7277a51db59ed2b195","sha256":"656426d137cc1a5e59a6056eed7b72169542fa9ad1ee27bd7bef06f75f22876c","sha512":"5ff9c8cf00cf01d7e3c3662948cb67159428ab5cf8a7bd5190c2a7d8064673bf910bc02021ecb53964583621011d3f0b8a91b320dc969371c7043517560ed226","ssdeep":"96:Wn4j2EJ6DmskFPaZ5euoeEkHbkf8vtIscq/Wlh4DCopn3FseBzLi4DIDY3jTmLB:5yEomviZk/zvQWgDCoZFsSdvTTc","tlshash":"d5c17e61f4b04d768bc726ab85f36bb122ec294fda0ccb2f62722d65c564191023f809","first_seen":"2026-10-09T15:59:59.144577Z","last_seen":"2026-10-09T15:59:59.144577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/Template/YUTU009/image/video-play.png","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.276Z","timestamp":1791561498276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /Template/YUTU009/image/video-play.png HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/Template/YUTU009/css/zui.css\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-61f\"\r\nexpires: Sun, 08 Nov 2026 15:58:18 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1567,"size_decoded":1769,"mime_type":"image/png","magic":"PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced","md5":"be7ca0a4a7c0317398a11162b1e09b75","sha1":"5dbe6a02524cfbf5f5111478a71f91a9259056b5","sha256":"cbad06b58f97516faa5f745d4e09716b5db3f134d5b4644b159681aa24909dd4","sha512":"a738fdac66796ab0963d1455f08ae6abfbce330a962b0318975db98a8c1939b4406a39302e6bccacff8bd0f7f52fb59a41eb9b664af975719ac1f3c0a3753e6a","ssdeep":"","tlshash":"7e31d78dfd61184267ead44b28f5805b8c170980dedce69bba8fc82719201f6193a3cf","first_seen":"2023-04-05T09:54:40Z","last_seen":"2026-10-09T17:32:38.493269Z","times_seen":4890,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/favicon.ico","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.681Z","timestamp":1791561498681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nlast-modified: Sat, 12 Sep 2026 07:32:58 GMT\r\netag: \"6aa5002a-0\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":435,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-09T20:29:43.461907Z","times_seen":18980891,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/logo.png","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.049Z","timestamp":1791561498049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 11 Sep 2026 08:58:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3c2bd-d421\"\r\nexpires: Sun, 08 Nov 2026 15:58:18 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54305,"size_decoded":52678,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"d8d15b51b02bf1d9050d2b9347278ca4","sha1":"99916d59b673bc13076ede09c549aaa907a50c44","sha256":"77bb4140d7512a07d6affc7469d5453ab5f62fe2ba9312bda14c89414ab6e465","sha512":"51a2ac4738c8453df404e3dd7ef3d7fe8ada926dc5376b01affafeb0b4d55b14aafd1ccddac57aace2c71869311578ea9654a4b2c14ae4e3f0cb5aa27965ebbf","ssdeep":"768:jRDU1chZhwbwX94Qq6Uw9fbmQEIGx8Sk0otfaWxsKgX5JlE0SPc5pI8P:jL2YW6v9fbSICMtfaWxsllEbc5pT","tlshash":"023301b757867b36f2d852310bdb564b19150239a37e3b63009c8da47cf2b123d98be8","first_seen":"2026-10-07T08:44:42.958848Z","last_seen":"2026-10-09T17:32:38.476685Z","times_seen":12,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzVhMThlZDc3YTM3YzdjZGNlY2E3NjkyMGExYmViM2RhLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.058Z","timestamp":1791561498058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzVhMThlZDc3YTM3YzdjZGNlY2E3NjkyMGExYmViM2RhLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3732\r\nlast-modified: Fri, 02 Oct 2026 09:31:07 GMT\r\netag: \"6abf79db-e94\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3732,"size_decoded":4067,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a89d5640c262609336a236e0b2c8de1","sha1":"951bab553c54cc66bd68033ca1e6842023f6cb1c","sha256":"81155f7ff544daf5a7155c3968dcd6315703f1b7555dc17958b0752af5a6f712","sha512":"c78cada1bbc0f84aa24335ed7285fa09dce4bf113d38da201f6e26b98b585c6a192ed209223af69f17de99b5bff7bb8b3c2320c5f6f89dffd3e5205d8dbe8312","ssdeep":"","tlshash":"1e718eb64cc06b98b646cbe06cc96b218ca390713e2b48822df7c03dccdfc1557110d9","first_seen":"2026-10-09T15:59:59.15262Z","last_seen":"2026-10-09T16:00:16.059218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2Q3NDE1N2RmNzU4MjA3YmI2NzMxNzgxYjAwMmJmNjk1LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.060Z","timestamp":1791561498060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2Q3NDE1N2RmNzU4MjA3YmI2NzMxNzgxYjAwMmJmNjk1LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2912\r\nlast-modified: Fri, 02 Oct 2026 09:32:43 GMT\r\netag: \"6abf7a3b-b60\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2912,"size_decoded":3247,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24f35af2253a14071ec236e9ae08cf38","sha1":"b566313c35366331e1a4efe33915029d86b44f94","sha256":"584c2711a2f3ec18c6031a10af02426da8049b902c3518fcab56a1d75c4ad864","sha512":"3e46fa527e1c4c727bcb3791ecc67157a2e4e986634526a4e2dc4d0478d009289c26fcf0c91e4d02bc5c4b8883c2ba40f2515d6cea7d59f4b68a24efaa6b9197","ssdeep":"","tlshash":"f4513b2366ab7c73731c5a47d1c3bbe16112176389156d5d06736f23344a715f188a27","first_seen":"2026-10-09T15:59:59.155039Z","last_seen":"2026-10-09T16:00:16.067777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzFmYjQxZjI3ZjY1ZTFkMTk1ZmFlY2Q0MjZiNDQ5OTFiLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.064Z","timestamp":1791561498064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzFmYjQxZjI3ZjY1ZTFkMTk1ZmFlY2Q0MjZiNDQ5OTFiLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3244\r\nlast-modified: Fri, 02 Oct 2026 09:31:12 GMT\r\netag: \"6abf79e0-cac\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3244,"size_decoded":3579,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"27f4c495fcaefaa9d65f561d525e0e9c","sha1":"b6acfa1c6009561ad39e1ac35e867b453de56a48","sha256":"b2523207635103cd3b5a20ba442a8d1de8fa2c26deac15b8cccdb28fb1651acb","sha512":"388f3eb678dcb2ecca8c4754579bd9ede1db57927edf5473ca52bd817203629eebceed32959aedbf8eb081f488368ed44a72ef751d4081ec93d3187640a3a201","ssdeep":"","tlshash":"04613c68500d5fbf518bc5a7e4b8e2b33d79186b44375d39e3a08c0b5b12f43d671594","first_seen":"2026-10-09T15:59:59.156715Z","last_seen":"2026-10-09T16:00:16.062395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzUzODVjNGQxYjRlYzMzYWRhOTI3YzFkNTNhNTYxNWJkLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.065Z","timestamp":1791561498065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzUzODVjNGQxYjRlYzMzYWRhOTI3YzFkNTNhNTYxNWJkLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3208\r\nlast-modified: Fri, 02 Oct 2026 09:31:25 GMT\r\netag: \"6abf79ed-c88\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3208,"size_decoded":3543,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c6938de147cf4540a1b958a6ca59438c","sha1":"975f800e76db0e504e574e36f856f165760ce91a","sha256":"2875b582198edcca7693dfee1693a9a081ebbfde3258706d320008141b437019","sha512":"e94ae469f80f220673f24c2a3f061969ef8544e02ce00402b9e2ac545552da4c5a52a3193dfec060a27219b51607165313212b3b323fb383bc40fa3d35834383","ssdeep":"","tlshash":"26613cfe901002947bc6eecd91a85dc53d4d7c57aca6d83a224ce83484d8cd1493de38","first_seen":"2026-10-09T15:59:59.16109Z","last_seen":"2026-10-09T16:00:16.063276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzI0ZTFhYWRhOWE5ZWI2YjZkOGMwNmI5ZjQ2ZDNmNzIzLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.066Z","timestamp":1791561498066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzI0ZTFhYWRhOWE5ZWI2YjZkOGMwNmI5ZjQ2ZDNmNzIzLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2542\r\nlast-modified: Fri, 02 Oct 2026 09:31:12 GMT\r\netag: \"6abf79e0-9ee\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2542,"size_decoded":2877,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3509f2943751fc0bdb69fc4ea2a5e247","sha1":"283001b631327bd3ea0385e4063660f0331a672a","sha256":"38c980024f5fc5558755c1ca2551c2d00d2222eaab3d2e76c34e6191f276b892","sha512":"62bf16a1ce8d1d06311ba9eb52e005cd04a4c429842c1bce19f3a9aad87d05cb953c71d4f322cfea0e9a8ae57bafc22b882c13563cf8f49b0a6eb478f744997a","ssdeep":"","tlshash":"4f511d41409cef4b693e89fd34d985c4a505c4766d351bc9694b0efbd15700db754934","first_seen":"2026-10-09T15:59:59.162326Z","last_seen":"2026-10-09T16:00:16.070088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2M2YzUzZmEwMTAyM2Y1ZTc1MTUyMGRhMTgzOTMzZTYwLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.075Z","timestamp":1791561498075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2M2YzUzZmEwMTAyM2Y1ZTc1MTUyMGRhMTgzOTMzZTYwLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2930\r\nlast-modified: Fri, 02 Oct 2026 09:31:26 GMT\r\netag: \"6abf79ee-b72\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2930,"size_decoded":3265,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x99, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b8d09076fa6e03c997b6a015ecb2a552","sha1":"41715eae32797d9d64a77857b4eb80b6e75683fa","sha256":"64491f0ff42a195a29db5edf303b55add0ef9a1698089b295fae02d3b7eb9b15","sha512":"6b78341fbccb5d859374267eef4d0b440c4d3fec6c3acd5acc2a9121722a08856e757fe64d89713c9bbba265f1bdc94e9fb6f7ab1a7aceb350f4b072a5c56358","ssdeep":"","tlshash":"af514c6711036af1dd1b78b128ea57288c08c68cc5e4834744e8b05495e2d25f887bbe","first_seen":"2026-10-09T15:54:57.162272Z","last_seen":"2026-10-09T15:59:59.165402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzk1NjIxYjc1OTYxNzMzOTE5MmMwMWUxYzU3ZWE3NTRiLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.082Z","timestamp":1791561498082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzk1NjIxYjc1OTYxNzMzOTE5MmMwMWUxYzU3ZWE3NTRiLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7882\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-1eca\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7882,"size_decoded":8218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bce83a7ad336f0e2a48f00b28e4c7af7","sha1":"bf88a4958a0637d4e90b22a96c97e354d0428179","sha256":"3d53efe91c6a479cde89291804a5a5082830ed04fc84f06eb4ee0751ec6051fe","sha512":"257986519f72ee508629fe8569a65be6702e7a7f4ae843b76ab15e095b009b99e9e061a4a028aa9c8bc1ff00d28de3cd0fdb571fb4e56b72d4be30cd1886a95c","ssdeep":"192:dI2e891ZEfClEydHNOeK+wO6yb5sO0lN4s1r8QOIImj:dIeZqCSyP+M5sTRrFd","tlshash":"b2f1bf60bdc19c9a2c8fc8b1e6952dcfb8f2f59287b71943984ace1016084904ae7e86","first_seen":"2026-10-09T15:59:59.166786Z","last_seen":"2026-10-09T15:59:59.166786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":578,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/Template/YUTU009/css/ate.css","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.002Z","timestamp":1791561498002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /Template/YUTU009/css/ate.css HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-126f9\"\r\nexpires: Sat, 10 Oct 2026 03:58:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75513,"size_decoded":5307,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"580e81cd261092011edff6a6b7e3225b","sha1":"c90d9517dc369865cc7e3a39d6929a8b9f0fda70","sha256":"46eb12417797e6d53f6b44cd31b34a4c8f83d0bf21412440f64aca939db2d0b5","sha512":"d242dfdc67cd32549d1e41be7ae40978df48ea39b03905d096b53f7f753e1db8770fcd3a2dcdc91c7c240730ca1d77388946dc278aa7903f9c08896b14a64e1d","ssdeep":"384:ta1j186hY9Y9181VYtYZ2x2Jvuv3XUY+Y7VdV4YHYBIELiE2/SriSazGuqbu:k1j1BY9Y9181VYtY6XUY+Y7VdV4YHYA","tlshash":"c6732c6e194111c447728f29d3de8e28eb3d917318221eee72c2588b9fe6f5853c9d4b","first_seen":"2023-04-06T19:50:37Z","last_seen":"2026-10-09T17:32:38.463903Z","times_seen":975,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzgyNDFjYTkyMmMxZjkwOWYyMDc5MTgxODJkMDU5MmFmLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.051Z","timestamp":1791561498051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzgyNDFjYTkyMmMxZjkwOWYyMDc5MTgxODJkMDU5MmFmLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2956\r\nlast-modified: Thu, 01 Oct 2026 15:31:25 GMT\r\netag: \"6abe7ccd-b8c\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2956,"size_decoded":3291,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b57859ea0717b64a51a55ae5b4c21863","sha1":"2551cff12174c198aa7373169a172cafeaa2fb80","sha256":"deb5f565ad7c043918f2f1b24ce60cf638f82ae9ca133bdb33f2fe54875de77f","sha512":"2eecc7814d635eb49b6a986c31c3f424b577e0e15173e9889707463d78a9c93a98e3990ed5c9a571dd57643fe6fe6ac25d99d9f8e8e0b1d1fc062b91d32eaaf8","ssdeep":"","tlshash":"a0515b00b2d67f2ca7bdc6dcdb27a9b173070464d5fc843db8129181e8290e29a4587d","first_seen":"2026-10-07T08:44:42.935193Z","last_seen":"2026-10-09T16:00:16.083379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzJhNDQ2MmQ0MDFhNGRhOWZlOGIzMDYxNmI4MWFlZWY1LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.067Z","timestamp":1791561498067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzJhNDQ2MmQ0MDFhNGRhOWZlOGIzMDYxNmI4MWFlZWY1LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3408\r\nlast-modified: Fri, 02 Oct 2026 09:31:17 GMT\r\netag: \"6abf79e5-d50\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3408,"size_decoded":3743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f046f7e7776f431db38e002c0d3691c2","sha1":"dbf0804c60e221a2abb9b74a5e0ed37e1f380119","sha256":"235527c039a4d267a863c8204bc845717dac2b7f64f319d93d547197c3107dac","sha512":"19847dfe4791939a5d6cd46ead3d79f918fbd0809a6f312d34e613c50531aa7ea2f46dd2baddb193f682396fd11d6f4a59586b834c38b32adb806d707bf59aea","ssdeep":"","tlshash":"35614dbb4726cadd3d13f4883284218291c93c7257a90144fec6768d5f4570a398b809","first_seen":"2026-10-09T15:59:59.173797Z","last_seen":"2026-10-09T16:00:16.08686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2U3ZTQ0Y2IxOGRmNGE4ODE4YjNhMGE5YTAzMWQwMWU2LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.074Z","timestamp":1791561498074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2U3ZTQ0Y2IxOGRmNGE4ODE4YjNhMGE5YTAzMWQwMWU2LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4150\r\nlast-modified: Fri, 02 Oct 2026 09:31:30 GMT\r\netag: \"6abf79f2-1036\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4150,"size_decoded":4486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"36499563701c02f05664068684465dd0","sha1":"b0a55d9d195f4c9fbe64cf72448a7a52b41ec587","sha256":"5a1d6dbdd0257fcb6e79553e00c65d46ce1f4119a9ceba556fb274fe702a8dc1","sha512":"4abcc0cd664d45db27ba35b8a6304a4ad55541218e9b560309e7594ff9d2b89eb362bdb08c9375e26ae9a56d38d12b77fe74a344aed0bd80e87575ff78909267","ssdeep":"96:OyaL84hXOSg2p03yXYfdQW7AwQGOvWSB595Fpa:AhXJo35WgAlB5dpa","tlshash":"b5817d6e12828c7335cf1ed9adafddc15ec3626c414a9d03c69573af10b3d9506a745c","first_seen":"2026-10-09T15:54:57.132815Z","last_seen":"2026-10-09T15:59:59.175724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xL2JmOTAzMThiNWU3NjgwYjc5MTBiNGRiYWNmZDUzZTgxLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.079Z","timestamp":1791561498079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xL2JmOTAzMThiNWU3NjgwYjc5MTBiNGRiYWNmZDUzZTgxLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6882\r\nlast-modified: Fri, 02 Oct 2026 09:35:39 GMT\r\netag: \"6abf7aeb-1ae2\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6882,"size_decoded":7218,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x162, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5eb9b1907d44581a508f1b2baebe3364","sha1":"a04c94f00eef11ac2539107e65fe298627696066","sha256":"9fdcca8ff5421fc953819c66112a8de14101574cd46d0bff9407bf01f8a719ef","sha512":"d89c5517984545c42b05d703961054bf49f6a8d6ee7e76082c2181175a4afea74122ce7cd3b153a16067654f65bea1eada7ffdf003a22e2a5aca64db830e84ed","ssdeep":"96:MtE3+9NoFtLmnQzuieMAu0BDNJmDezM/7aJgBNDq93bwU8dsUmIICVgQT8TqUoDV:MG3FG7ieMAuCTAOpS2cU8dsri8G6IOLS","tlshash":"06e18e536880025d3f8e7f68744012a226c18e368f41bd799ac957a8db9fb1f2ad5226","first_seen":"2026-10-09T15:59:59.177084Z","last_seen":"2026-10-09T15:59:59.177084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzM0ZmNmOTU5YjY0NWYzODAwY2QxOGUyZDBjMjYyMjc3LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.089Z","timestamp":1791561498089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzM0ZmNmOTU5YjY0NWYzODAwY2QxOGUyZDBjMjYyMjc3LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6050\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-17a2\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6050,"size_decoded":6386,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"66b805b3f0aec36524a4299ca688da8a","sha1":"56787a4d1522bc2912f90db2595bc71854b7f3b6","sha256":"575e248638003a929cd8194e228cc4b4bff1fd35d18ac3acaba8afe243ea40fa","sha512":"1f75f867848bda2bcd9d0badd58b7c7eb986d0e5b7b4401e772a1cc398bd5c9169bd2afe144d8172057db79059341697e90cb154ce6aece5a05164a37b7df276","ssdeep":"96:hlxpSsZvm5YV4TwRsW3BEcIw9ScsLNGMW07LsbIDwK7+MkJdkcXQnX2zpl2WBAXW:hlC+e5k4URx759ScsAMjXsMF+FJdk0QI","tlshash":"74c19e2e8bc6044af3bc798257b07042a1ae1dc81299f303f4d0b3d085b26e89932b5b","first_seen":"2026-10-09T15:59:59.179746Z","last_seen":"2026-10-09T15:59:59.179746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzEzNmY4YTE0MmI2OTkwNWU1OWU1ODhjNWM2YmI5NzEyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.055Z","timestamp":1791561498055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xLzEzNmY4YTE0MmI2OTkwNWU1OWU1ODhjNWM2YmI5NzEyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2994\r\nlast-modified: Fri, 02 Oct 2026 09:32:42 GMT\r\netag: \"6abf7a3a-bb2\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2994,"size_decoded":3329,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87e961531359d6cc4c2dd4f2c0244655","sha1":"7f57b194c7bae6d06c7fb5c8d24541f66a2f9d68","sha256":"17212ab9a9f70173d002df9fe7b66daf1654d42f9117777b71aca618a1a8d27a","sha512":"65e9a82df1342182cca512213409b6b4a84745ca111a186b6c1a0a0c6a00ca299c69f4def31d8afc52a88f6c5a4d210905b3f27cec629e0ff7d06e0460874489","ssdeep":"","tlshash":"0a512cede660fbab0d18830634f56e5463629527f31a89e42b89bc4c84a30462cc9c65","first_seen":"2026-10-07T08:44:42.936503Z","last_seen":"2026-10-09T16:00:16.083979Z","times_seen":5,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2VmZTA1MWFjN2JlZjc5NjQ3Y2NmNTE4MzdhY2E1ODEyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.063Z","timestamp":1791561498063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2VmZTA1MWFjN2JlZjc5NjQ3Y2NmNTE4MzdhY2E1ODEyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5002\r\nlast-modified: Fri, 02 Oct 2026 07:25:29 GMT\r\netag: \"6abf5c69-138a\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5002,"size_decoded":5338,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"20f570b71f1641c37c12eff640c893c8","sha1":"f917633d2ca3a7506bac8c5d65a654f6ee3fc2f3","sha256":"396dad809390e38922af4fe0778b49dfdbf5f804f88d11dd1990528da19bed74","sha512":"638d1dbea31d8067d5c81747e0854c12cb7708307d707c9ade2d0ba4b009897a934ebd20b7a760022420570f1ba2fe79052060173a1a1f157fa8f7a9ac27462b","ssdeep":"96:UnPAgvsoofQlqOS6u+930rqjMSFAbcBQvY5eTadijhAYrdJjFPsmAHY9:UP9vsooq02jPmbcBiY4aYjyEJjAHY9","tlshash":"58a17ccbc92e528c2c1246ab7cfc468f3be62512e00fc714f448aeb0d462d953f91d52","first_seen":"2026-10-09T15:59:59.186055Z","last_seen":"2026-10-09T16:00:16.06637Z","times_seen":2,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMi0xLzkyMzU2NDYzMTk3M2Y4NDBhNzc0MDIwOGUzYjQzMzhhLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.069Z","timestamp":1791561498069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMi0xLzkyMzU2NDYzMTk3M2Y4NDBhNzc0MDIwOGUzYjQzMzhhLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nlast-modified: Fri, 02 Oct 2026 09:34:49 GMT\r\netag: \"6abf7ab9-c28\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3112,"size_decoded":3447,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ce211e538bcc404ca6fb1f6a0b8c6b15","sha1":"dfec2e1d044a00173ff23ff405428a5f819ebebd","sha256":"c6710e0d439d382b2465fb586326428da1d3b7995479648a021b3644fa74e82d","sha512":"c3e7131f1a7a2f1f6d7abfc812278891103f6826059ff337a92a16ea79dff236e3c4b9a256c58025c8746dfbae169722b948e89b2de7d5e3402f977f627f8a76","ssdeep":"","tlshash":"48515c6407bb84251c2f38db0babd815c0f50773234f0b2135ac652fa4138fe66a6b21","first_seen":"2026-10-09T15:59:59.188383Z","last_seen":"2026-10-09T17:32:38.500694Z","times_seen":5,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2Q5MWZiYTY0YTAxZTg2Mjg0NTI3YzFjMTlkZWJiZWM2LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.072Z","timestamp":1791561498072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2Q5MWZiYTY0YTAxZTg2Mjg0NTI3YzFjMTlkZWJiZWM2LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2672\r\nlast-modified: Fri, 02 Oct 2026 09:31:26 GMT\r\netag: \"6abf79ee-a70\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2672,"size_decoded":3007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1f1027502029687a813ba91bea53bca1","sha1":"46f5d077c4c2624cbe2d9405eaabef4a2ea782aa","sha256":"95b1e3cfc3c275e82fe3c96873241d506b787717dc5b1c498802b32d9cf8542d","sha512":"ba5ff6a65d607d223a6450c4f74fc6ba228e7ec357714c240a569e198d85a5efc25b6c057110572a11a904ae637a84c7b6245bf9f5c776f3fafa5ad96e3d78c8","ssdeep":"","tlshash":"2c513b0f0edc7e7f152576249a530e4eb822557932c7ccccd8b0d8726a63a129b5981e","first_seen":"2026-10-09T15:59:59.190124Z","last_seen":"2026-10-09T15:59:59.190124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":545,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2M3YTllYTk5NjlmYjgyYmExYjczYzFhMWM4YzEzYjVmLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.077Z","timestamp":1791561498077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2M3YTllYTk5NjlmYjgyYmExYjczYzFhMWM4YzEzYjVmLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1786\r\nlast-modified: Fri, 02 Oct 2026 09:31:27 GMT\r\netag: \"6abf79ef-6fa\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1786,"size_decoded":2121,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"41fbbe440b4190a6f1e1129c7589723d","sha1":"583f17626b591095f6ec1e09cabf57ccdb153a50","sha256":"fee27345a21e1b0ebf79f30e9eef90b4e60d544f94ba69ffbf0f584d925021b3","sha512":"dc1c29ed637f78ec75db2040b1b122c8f475241ce0adf75101629e35f8bf0394a5817b7af7ab60eec4da5b03a06dfa6864627ec87a109c882f91fe35aa0879e7","ssdeep":"","tlshash":"ce31292ce90424abeb086b2c45fe5ef1c467d90b4900f6e56f9cc4e898d526280c906b","first_seen":"2026-10-09T15:54:57.13928Z","last_seen":"2026-10-09T15:59:59.191499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzA1OTA4OGQ4YzAxYjI3NjZkMDE1YTI5ZWJmZDViMDBiLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.087Z","timestamp":1791561498087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzA1OTA4OGQ4YzAxYjI3NjZkMDE1YTI5ZWJmZDViMDBiLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6442\r\nlast-modified: Fri, 02 Oct 2026 07:21:29 GMT\r\netag: \"6abf5b79-192a\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6442,"size_decoded":6778,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x150, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1504b2cefc3e47a688ed0bf611018b00","sha1":"39f8e8c7670961222b01e6b40239ac546f88c8eb","sha256":"f27dbf7f6ae51ee6fa3755f9cb2df3a6d2d3fbd1a8997062be344e555805d6c8","sha512":"2514932adbbc3d7939b3a985810ca7a8c8e7e346229eee0d66990270ac5b545103fb9e9ce606be283be7dce5c0a5473cb18ecf0a597f99689c46cef3b75f610e","ssdeep":"192:rVE7Vg0Z3rN9OHrv6SE/4pZu/Vn6PPbZ50:rVEpNiw4p4/VMPbZa","tlshash":"c8d1be4b0d8ca2279bcab07169b5e18b40323f3dd1a40aea72ecc1677d244b52248cb9","first_seen":"2026-10-09T15:59:59.192881Z","last_seen":"2026-10-09T15:59:59.192881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/guanggao/176-179.gif","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.090Z","timestamp":1791561498090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /guanggao/176-179.gif HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/gif\r\nlast-modified: Fri, 11 Sep 2026 08:58:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3c2bb-25af3\"\r\nexpires: Sun, 08 Nov 2026 15:58:18 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154355,"size_decoded":59464,"mime_type":"image/gif","magic":"GIF image data, version 89a, 176 x 179","md5":"76abcad09da053df6fc6b068fc96288c","sha1":"98ee3ea765f163bbab2803f9d2097beb0d28eb2b","sha256":"108e9b745955f8d073f5ac32f60d5bc6bf428a41bdfd3d5ca12827e67084826d","sha512":"6ddd490987dea1a006bf759f863da81394e8324824ecf17e81f592f750b7e2634a0c582e4274377f60c1d7f5289140d1b0889d9b8591184bf250d3434dfc8c04","ssdeep":"3072:BO1kBpvz4IrayNrvz4IrayNrvz4IrayN3vz4+AwXo9CwlfoUwlfoUwlfoUwlfoUG:A1kBpvzxrvzxrvzx3vzcwXo9Cwl9wl9w","tlshash":"0ee3f12b510ae97287fc76c3697a9824aab51aeb2db3741b50017eccd58743ca730f49","first_seen":"2026-10-07T08:44:42.922958Z","last_seen":"2026-10-09T17:32:38.517521Z","times_seen":12,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2JkMWZkYTgxMjhiNGUyNjdhMzg3YmZjOWM5YjQ1Nzg1LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.062Z","timestamp":1791561498062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2JkMWZkYTgxMjhiNGUyNjdhMzg3YmZjOWM5YjQ1Nzg1LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4244\r\nlast-modified: Fri, 02 Oct 2026 09:31:18 GMT\r\netag: \"6abf79e6-1094\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4244,"size_decoded":4580,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e52a50cc2eccc9f8e6da47575f5f1344","sha1":"c0765c325b67f2d50bdcfeb1b5663488d875d41e","sha256":"5f027cb9df667de4eea23fc8ad1c294157f5d1438b834f4105e7ec2b2c09c87c","sha512":"f89ea82f18733773468dfeff7b048437cb1b532ec147b9a501fd61bf15fe8c6f2c3a5fbc7cc4d5f8edb79c0640bb0d8846209bb713d378748991965ce7f3f016","ssdeep":"96:8jImok3RuyR+/OarDTPYYKVxCANb1XCTxJ:Tmok3AyyrDzYYyDb1CH","tlshash":"43915c63ffde1c544655bd1428299e9ac950d80c2eacee0137d8e9ba35429f7f132891","first_seen":"2026-10-09T15:59:59.198113Z","last_seen":"2026-10-09T16:00:16.068543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMi0xLzg4ZDg4NmFhM2QwOTNiMGVhMjQ0M2Q4Mjc5YjFjNjkyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.068Z","timestamp":1791561498068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMi0xLzg4ZDg4NmFhM2QwOTNiMGVhMjQ0M2Q4Mjc5YjFjNjkyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4836\r\nlast-modified: Fri, 02 Oct 2026 09:33:16 GMT\r\netag: \"6abf7a5c-12e4\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4836,"size_decoded":5172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3423ca4741193f00c05b1aa8ec1f4a35","sha1":"cecf72f0a376207e8cf26b037704c241fb8eedea","sha256":"132d7b338a63ade5dcf212d8707b905fe6ba9374e5b4b2623cd91c05469bf247","sha512":"0d103e7a24b450e5d97483ccca3a767e5403a21d30e6c1e324b5381cf2eacc478d53df6345dd614e53a00fb0ca50c2b1e072d0dc20b8b05182ad2e4abba58cd5","ssdeep":"96:s1OM0dJnb0eLDQw9wuwX2SgfFFfHQaCsDOZID7ro7I3kYAf3gyPMd41whvl:s1v6bes3wXhgfPfHgIEWaf6cc","tlshash":"40a17d399ff66210883fe5e31768348f018c26d8b82944777b8948c5937f61d887497d","first_seen":"2026-10-09T15:59:59.201823Z","last_seen":"2026-10-09T17:32:38.485647Z","times_seen":6,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":493,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzczZTNkM2MzYTJiZTc4YjRlYjI4OWI3MGY3NDJiYzQyLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.073Z","timestamp":1791561498073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xLzczZTNkM2MzYTJiZTc4YjRlYjI4OWI3MGY3NDJiYzQyLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3412\r\nlast-modified: Fri, 02 Oct 2026 07:12:30 GMT\r\netag: \"6abf595e-d54\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3412,"size_decoded":3747,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ea27115baecb437225d14d327072c116","sha1":"56145d1b31017ea96165c3ca4ec1532a60153185","sha256":"fa9f2634ac7f6678a20b26518a0a5ad5b6c6550c3362cb1e518e14a8810ee670","sha512":"8652adaab9637150bc1c68467f617a83f432e1374174234e2299503afbacb976126a7a538677687e337822c6776b3af514119d396411deb956df73893b382acc","ssdeep":"","tlshash":"66617ff71108c3d0d94176c85de03856b370469c7dca3ee300fdd7aad482693166f51a","first_seen":"2026-10-09T15:54:57.200244Z","last_seen":"2026-10-09T15:59:59.205153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzcyMzliYmZlZTJiOTUwOTQ5NTBhYjA3MDA1OTM2Mjc0LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.088Z","timestamp":1791561498088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xLzcyMzliYmZlZTJiOTUwOTQ5NTBhYjA3MDA1OTM2Mjc0LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4948\r\nlast-modified: Fri, 02 Oct 2026 09:31:04 GMT\r\netag: \"6abf79d8-1354\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4948,"size_decoded":5284,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x161, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48e3e26bd5a219fa26e73bb054ca0e03","sha1":"c0ba262eac5b8cc298e00d2f1cdf5eb8cf6f01d0","sha256":"2233a1853c138d8ab77c931421731f4ebb5b84a471d7d044df4565511387f669","sha512":"b61b9cfb1ff3c76a7f75973e909dbec71d04a13d35f4340a81d1053bb5705a005637d312d51b7832212daa71c45aad5c359694d6e2e5298a5a4d5c6fbaf93aa7","ssdeep":"96:UFPV0GXpqKwIU/qPissgmwmAhQMhFhhAX7WhwpzUw/CFN5nknB10Z:EeGoWU/qPFm/xMhJu7WhuQw/MNaW","tlshash":"01a19da7ebe5dc282de1fb76d945934e495c8166867e2f0c1a7bd17f02034282d0853e","first_seen":"2026-10-09T15:59:59.209973Z","last_seen":"2026-10-09T15:59:59.209973Z","times_seen":1,"resource_available":false,"data":null}},"time_used":574,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2IyNTBiYzg1Zjk2NWRlYTMzMmVjZDI1M2ZhYzQ2ZWJiLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.057Z","timestamp":1791561498057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkxNC0xL2IyNTBiYzg1Zjk2NWRlYTMzMmVjZDI1M2ZhYzQ2ZWJiLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4322\r\nlast-modified: Fri, 02 Oct 2026 09:32:06 GMT\r\netag: \"6abf7a16-10e2\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4322,"size_decoded":4658,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb1d04030d643a4ec700f5e47756e213","sha1":"5e0665f3acacac971b2c2e984f69937298bfafdd","sha256":"eda10a25cd384a9c9e430fff720e2232fc292f77d5321d18f97c9491751fb790","sha512":"6a11a772d437a475d8ce767467100a3800e75964802b6719e0e81aa30aa6c4f809fb3b3a956e60dccad195248ac1110fe4b3a2af7fa7ca43006b484fcb8257b7","ssdeep":"96:ywblqOx4GnCzsK9JZOqjd/vRd/6pQNKVwvZFrTKE0on:JlqOSGCzsebd/vH8VCDN0o","tlshash":"5c916e0ec6528205968c90fc689fa12262d65c801466ec86349d533fbc75b4b64fea6a","first_seen":"2026-10-09T15:59:59.217808Z","last_seen":"2026-10-09T16:00:16.065657Z","times_seen":2,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xL2ZhMzc4OWVmZTYwYWQzODE3YWViYzEzN2Q0OTlhYmM5LmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.086Z","timestamp":1791561498086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOC0xL2ZhMzc4OWVmZTYwYWQzODE3YWViYzEzN2Q0OTlhYmM5LmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5400\r\nlast-modified: Fri, 02 Oct 2026 09:32:08 GMT\r\netag: \"6abf7a18-1518\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5400,"size_decoded":5736,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"de434ca19da2cd4e1f9f78e7b9167983","sha1":"2cbf0d8035a55943e11a38773b0688a7688e5016","sha256":"984db6c2c5b3af0079208229e0dd189b2052009b8d906542f30d2db6c71b093c","sha512":"ca7c3568c9d50adefabd46774631a65802e0ea34e822ccc0b5e93f8766d5b8a49899120b65311639f331b2a4e47833f254c11e258a711d3fe7b85919861420f4","ssdeep":"96:+FPiQ+IcfiHSQdOsW93PqIlWz4Q6aTh7TEfTVYeqgkfG2won+acgBH:+FPiQ+L5QdOf93P9lg4QfhfEfTVYeqZZ","tlshash":"98b19f4814e65a7ad5b5b818f26848ccc3c3b708217d5ee31994cdf84494e47f15b4fb","first_seen":"2026-10-09T15:59:59.219095Z","last_seen":"2026-10-09T15:59:59.219095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":575,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/Template/YUTU009/image/video-mask.png","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.274Z","timestamp":1791561498274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /Template/YUTU009/image/video-mask.png HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/Template/YUTU009/css/zui.css\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 107\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\netag: \"6aa90d05-6b\"\r\nexpires: Sun, 08 Nov 2026 15:58:18 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107,"size_decoded":614,"mime_type":"image/png","magic":"PNG image data, 1 x 46, 8-bit gray+alpha, non-interlaced","md5":"6a5ee87ff75437cb480df839f36004fd","sha1":"eac66370f99601cb7febef320c9540d4593cd856","sha256":"c9b6925bdd64dab63151c3106347fefb8c500d87ac3d87d9a82e9a1c561233aa","sha512":"c0c71d6fbfcb472b7698354ce44b111cdd5a62eda31b1e8cfa62d585f9fc14ded889ca7763b4f23aaa8a12a10e1e32b3c605485ae8821c031066ed7e89493b05","ssdeep":"","tlshash":"8cb012e36f629d74ca80517bc3a69705ef36d12e423eb7090b05c4351c24109698550e","first_seen":"2023-04-08T11:25:09Z","last_seen":"2026-10-09T17:32:38.434312Z","times_seen":1725,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-09T15:58:17.079Z","timestamp":1791561497079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:17 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 02 Oct 2026 08:25:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6abf6a8d-99e4\"\r\nset-cookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978","quoted":false,"path":"/","max_age":864000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978; Max-Age=864000; HttpOnly; path=/; Secure; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39396,"size_decoded":8630,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (732), with CRLF, LF line terminators","md5":"4f165262b7241fba7cd9a1f1efec7e77","sha1":"efa2a0814866e815b40dea10dce8e66df65bb8ce","sha256":"9dcad67d281b9f6feea55b4fa5302904fe2e24a3b37e51ea1e8fec870c2b33a6","sha512":"af24df6aeb5d061c8742492abe6afa95973f00cda19d93be41a893ba977ad595ea00d3bd76ef612a6cc5185d637356d3d2a2d411d3883f4984206ed893099784","ssdeep":"384:B3bZFv7095ixBBwfoniI6j7zro0+QpW7GHTH7eaH7zZaN7ArarzrLrCrGrErYrTq:BLZFgvuzkMBPYxQgw8Hw6p","tlshash":"c103633175cf0d77342282cac8ec6338109f9d3ad9614c5df6b741bc8787da6a26a1da","first_seen":"2026-10-09T15:59:59.22374Z","last_seen":"2026-10-09T16:00:16.064736Z","times_seen":2,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":215,"connect":151,"send":0,"wait":170,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/Template/YUTU009/css/zui.css","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.033Z","timestamp":1791561498033,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /Template/YUTU009/css/zui.css HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 09:16:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa90d05-14f15\"\r\nexpires: Sat, 10 Oct 2026 03:58:18 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85781,"size_decoded":16302,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5e34fc7acb3eb58cf82c27910ee655a8","sha1":"32783cdc1323b144798baf5a2c4ff8caecb8e789","sha256":"26a7480622e3b69d4a22ef8d4bea305916fcfc5a643eb17a0caa2e0d6f798476","sha512":"9fda4f2ae853fb6f92b1f9f209f5dbed378c3e72068ccd45cb8b5f405833f02704c11fc0fe944a0bb8670448784df84f10d53d42e9734d93ac44f8416223413c","ssdeep":"768:rvMCFtD3Bwr7M5uSemLjsFR6+n06e4AIdxlPJDRhK5Abi79UYJwpnzhuoAGdppMS:Xir4Gqjsv6+deyrpMHFRztO+8rO+5","tlshash":"b8837557f7102149b13787a4fbf3e7a6df2ea003f20206b9fd9d2514c7194962ab2789","first_seen":"2026-10-07T08:44:42.942388Z","last_seen":"2026-10-09T17:32:38.510065Z","times_seen":12,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2ZhMGVlMTYzODQ5OTZmZmU2MDM1ZDE2YmU5Yzk4NThkLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.070Z","timestamp":1791561498070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwMS0xL2ZhMGVlMTYzODQ5OTZmZmU2MDM1ZDE2YmU5Yzk4NThkLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3332\r\nlast-modified: Fri, 02 Oct 2026 09:34:49 GMT\r\netag: \"6abf7ab9-d04\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3332,"size_decoded":3667,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x135, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e1468cee21514e33edc0931aa940b0ef","sha1":"a81a4c81e18a3c6564ccd4514f4424660d405f43","sha256":"53d86dd104f030512d3b9066084cd4237a336fdde3c8313a9dcea5a272ba4caa","sha512":"e13b6ce3f627fc2113ee46e75e97d0dbb1a6020fbefa52df57a6090641da3be70282e9f77342399a79f0c0245bbf589d4d526dce4ed98ef572a9a29bcf9a68c6","ssdeep":"","tlshash":"1a612aa1a05149ceee7bbe97a7670a8058e27e54621b031d44e4c8c092218f87e7d8ce","first_seen":"2026-10-09T15:59:59.226415Z","last_seen":"2026-10-09T15:59:59.226415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bw-bybit.com.cn/xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzQ4Y2NhMjNjODgzZDkyNzE2MDgwODc5ZWJmNjQ0ZGYwLmpwZw","fqdn":"bw-bybit.com.cn","domain":"bw-bybit.com.cn","tld":"com.cn"},"ip":{"addr":"142.4.127.83","port":443,"asn":54600,"as":"PEG-SV","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bw-bybit.com.cn/","date":"2026-10-09T15:58:18.080Z","timestamp":1791561498080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fk-bitget.com.cn","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Oct 2026 12:10:46 GMT","end":"Wed, 30 Dec 2026 12:10:45 GMT"},"fingerprint":{"sha1":"63:98:29:A4:75:34:92:E2:A3:2E:24:CA:FE:61:10:8F:11:1F:7D:41","sha256":"25:B6:E9:E8:79:BA:10:AC:BF:A3:75:65:1F:92:DD:22:F9:C6:41:68:6C:5F:B8:61:57:A9:CF:75:04:FA:4A:9C"}}},"request":{"raw":"GET /xxf-image-cache.php?u=aHR0cHM6Ly9zYnp5dHBpbWcxMS5jb20vdXBsb2FkL3ZvZC8yMDI2MDkwOS0xLzQ4Y2NhMjNjODgzZDkyNzE2MDgwODc5ZWJmNjQ0ZGYwLmpwZw HTTP/1.1\r\nHost: bw-bybit.com.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bw-bybit.com.cn/\r\nCookie: server_session_f8504e49=373f51e2d78cb9d297d47f9302fbd978\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"server_session_f8504e49","value":"373f51e2d78cb9d297d47f9302fbd978"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Fri, 09 Oct 2026 15:58:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7140\r\nlast-modified: Fri, 02 Oct 2026 09:32:55 GMT\r\netag: \"6abf7a47-1be4\"\r\nexpires: Sat, 09 Oct 2027 15:58:18 GMT\r\ncache-control: max-age=31536000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7140,"size_decoded":7476,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 240x170, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f912cafb5d5ca4ff72759462154dfba6","sha1":"d2650fed4e8f7e0ae1a34f92a7a50999c8fcefb2","sha256":"9f9ae1d631ff9220e41f9c4b2a0266fc16c2dcf2faa88e2ecac9007e4c06efa2","sha512":"9b62fdbc6b324663b989d6038d1ebfc62145edb1990eb06f5368a73d043f979e2bf631a2ede72f623f72501d12463d3157b8d92e98fc44aafb6a9f0a0e73c68f","ssdeep":"192:s4uo08oSHuiY6zPDEF9eepxl5070kCC39wF/gcrX:kzSHvsF1I70qNwFoIX","tlshash":"33e1b0424572ef8134d94b0cc20c83eacf028e5ddb127d8a2254ebd76d2fbe0c44920c","first_seen":"2026-10-09T15:59:59.22766Z","last_seen":"2026-10-09T15:59:59.22766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-09","alert":"Sinkholed","trigger":"bw-bybit.com.cn","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}