{"report_id":"f87b2265-8ad3-4f2d-8893-087a36a85a25","version":6,"status":"done","tags":[],"date":"2026-03-12T13:00:05Z","url":{"schema":"http","addr":"gmgn-ai.one","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"ip":{"addr":"104.21.64.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gmgn-ai.one/","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"title":"GMGN.AI | Blockchain Data Intelligence Platform","dom":{"size":6432,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"25c8021ff6cf51c15ac8f8ccac63d9a3","sha1":"c3764bddede2afb0f7c6ec9679a27b15eb3f19bd","sha256":"c6c33b09f36eb31b9c78a4b12e0d33cf242a8d78ca28e588343bf350c8268cd3","sha512":"0aea2a6f07d9f32640d6c2785b78deb36fe3748155bd2affa4910dde3654fc7c57f4451fda0bd2468f0996cdf37278c19a3e928bcdf09e5bd1f5e73836d69fea","ssdeep":"96:n1vefzooDIyeVQRLUF4C3q0NLdAKSIfqcPWV0YKg90LeV+VYINMPBW2mg4J4:Iz25KRQzwKSIfqcPe0rM0L6+VYiy64","tlshash":"4dd1d526f752324701236373bc930060a3a9908ad77525ecf47c812cebcb19c892777e","dom_hash":"domhash439eb08877dc75d37e014344cd2a52ed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"gmgn-ai.one","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"ip":{"addr":"104.21.64.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T13:00:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gmgn-ai.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"gmgn-ai.one","ip":{"addr":"172.67.187.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-03-12T12:43:47.249173Z","last_seen":"2026-03-12T12:43:47.249173Z","alert_count":3,"request_count":3,"received_data":285984,"sent_data":1353,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"gmgn-ai.one/","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"ip":{"addr":"172.67.187.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T12:59:43.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmgn-ai.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 06:54:03 GMT","end":"Mon, 01 Jun 2026 07:54:02 GMT"},"fingerprint":{"sha1":"36:CC:2F:7B:92:88:F4:91:BC:F0:87:DC:83:E1:80:39:35:42:BD:19","sha256":"3C:A3:7C:91:09:D7:D8:D9:0D:F6:EA:77:70:54:19:8D:69:0B:FA:F2:5D:B7:3A:13:BF:FA:89:B1:0F:EE:61:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gmgn-ai.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 12:59:43 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oe6peKrSEH9z6NvZRukBz35mez91l4T1Z0i2%2FMZRiAx5cIIDlDnSF%2FPFzl1ZQAq70b1be9o0Oi9m1TZRsLgaeZalxmhO0DbmdxcU\"}]}\r\netag: W/\"eb3c109348e99c8ebdda7ad7ad4cf1b9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9db2fa4c79d056f6-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6629,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9411f4b4632b3f169be50b0b70f17c13","sha1":"ac716f998470d061ebdb5786f23f14e7a6aa894e","sha256":"cdebbe6cc1d3a7eb5aa834a73ceec9abbe250b5548ba2f493e6913cc5c4c0838","sha512":"8eee4c4c92d760e9827e548ed540e9ee4cd8b53ed7ce1c26bb1daa6990d674539cc4be33de0feb171c2234902128050a63de70ac4703f47398a6a4974be3d296","ssdeep":"96:xvm5szDiyZMjR7hKUF4C6V0ZczhvdSINNtcCC94ZZKK0cR20YeVSuYIKMPOWFEmo:chMMR7YWYdSIvtcCzzZi0Y6SuYTZuy","tlshash":"48d1a512fb513c47417393bf748351a8f22980c6976226b8b43d812febe615c8967b3e","first_seen":"2026-03-12T12:43:52.708738Z","last_seen":"2026-03-12T13:00:09.665173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":67,"dns":27,"connect":8,"send":0,"wait":32,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gmgn-ai.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gmgn-ai.one/images/bg-gmgn.png","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"ip":{"addr":"172.67.187.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gmgn-ai.one/","date":"2026-03-12T12:59:43.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmgn-ai.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 06:54:03 GMT","end":"Mon, 01 Jun 2026 07:54:02 GMT"},"fingerprint":{"sha1":"36:CC:2F:7B:92:88:F4:91:BC:F0:87:DC:83:E1:80:39:35:42:BD:19","sha256":"3C:A3:7C:91:09:D7:D8:D9:0D:F6:EA:77:70:54:19:8D:69:0B:FA:F2:5D:B7:3A:13:BF:FA:89:B1:0F:EE:61:68"}}},"request":{"raw":"GET /images/bg-gmgn.png HTTP/1.1\r\nHost: gmgn-ai.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gmgn-ai.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 12:59:43 GMT\r\ncontent-length: 277045\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d83714888711bc1980a6912ee403daa5\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wkF5aMq0nuB286McoG8LoZ%2BhiWHd%2FDV1QHOHEE5Y7w8GGZFOam0yEyEH%2BtsU4fd5cJ8IEhpOlc%2BytutllMW1AyNpQ1UdexBcxxF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9db2fa4dbc08d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277045,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit colormap, non-interlaced","md5":"4585dfacd99305a5a23eb4667f8bb60d","sha1":"aa44a857d20add033dad4de4973e4f2bd2705e3f","sha256":"4d1548529a8a70048b4c95562cf8749e6d0af49589a90cdba09881942e08f089","sha512":"4b8033b4ce028560617e637af587e8a0c28e183c1d4db538b0bdba053be5beb5c37071f7d287de14f63db892aaa1f10cb443713a915b3e3db644694d04ed3517","ssdeep":"6144:tjWBlcWTKV84D8lz9137PSfiPugwX6Rv5qfHeeI1f:ticQe8lz7PSfiPse0af","tlshash":"7444239d135edc8ffb8cf60dfd633d99b72951740992bb9a2754b92c29570e32232084","first_seen":"2026-03-12T12:43:52.709771Z","last_seen":"2026-03-12T13:00:09.666019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gmgn-ai.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gmgn-ai.one/images/favicon2.ico","fqdn":"gmgn-ai.one","domain":"gmgn-ai.one","tld":"one"},"ip":{"addr":"172.67.187.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gmgn-ai.one/","date":"2026-03-12T12:59:43.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmgn-ai.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 06:54:03 GMT","end":"Mon, 01 Jun 2026 07:54:02 GMT"},"fingerprint":{"sha1":"36:CC:2F:7B:92:88:F4:91:BC:F0:87:DC:83:E1:80:39:35:42:BD:19","sha256":"3C:A3:7C:91:09:D7:D8:D9:0D:F6:EA:77:70:54:19:8D:69:0B:FA:F2:5D:B7:3A:13:BF:FA:89:B1:0F:EE:61:68"}}},"request":{"raw":"GET /images/favicon2.ico HTTP/1.1\r\nHost: gmgn-ai.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gmgn-ai.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 12:59:43 GMT\r\netag: W/\"6defe0a8043db30cfcddc2c1e9f8566b\"\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAh1VI39pyNRP8B57UwaQjPWr2JVO1AMUWjRX6SONh3DGwUjg7jQWkdwJvKgSMKvOy%2B%2F0QrpTUoo8b2Wc0U7jwPNeL80cFWq5TfR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9db2fa4e3c21d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":438,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"094f2abb61832a66cf1cf6226bdab291","sha1":"d10b9a263fe884ba6f5085badbd35922d0e54c15","sha256":"d15a07e6795d235d597f3ba97b83dd56f768c2e40257f5c0ac8676b1467b27d3","sha512":"a3acfe4d80d0ec44f1e4ebe52f33ff112c1ee528724add1f6b9d8eef2b678cd7f59243603f1e9ac0db574efb6a1c5cb2028bb634020f8fa243fb0a3f6f5d29f3","ssdeep":"","tlshash":"9ef023d3ab044068e530053f44b30cc8389b1eac6510330d9c42f8165017c489bb9732","first_seen":"2024-12-31T20:52:46.352191Z","last_seen":"2026-05-17T23:46:39.045266Z","times_seen":15,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-12","alert":"Sinkholed","trigger":"gmgn-ai.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}