{"report_id":"0710ea59-b1a8-4aa0-8c99-15eb7f11d5fa","version":0,"status":"done","tags":[],"date":"2026-08-31T08:57:53Z","url":{"schema":"http","addr":"openpowerdfs.com/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"openpowerdfs.com/pc/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"title":"openpowerdfs.com/pc/","dom":{"size":52146,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10469), with CRLF, LF line terminators","md5":"f600c1d74cce2741d3b7e1c0d43f166a","sha1":"0a92c3e4ec6cb01b3cd7269d67feb30ad0f0aa2d","sha256":"54a3b166379b31765e722c889e7a7b7f3eeb8eca77801b40aa30e6a7705842fd","sha512":"c009aecba10b00ff0b4259343d15824f88d7319956a97d4e3d85797d22349f56e9d795b676fd340a2ef293d76427b83b9525c355316b4e8fc2485617deff2c11","ssdeep":"1536:Slc6FARjjcQS9D84YBtN7ceu3W6YEJJSe/VPl:HBtZu//","tlshash":"52339371601d1da5bfbbc4856760d26e1916fb2bc1918c90f66f17ac4fcafe208a9f04","dom_hash":"domhash541002972682e0a9b0283daff480a990","first_seen":"2026-08-31T08:58:03.875378Z","last_seen":"2026-08-31T08:58:03.875378Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"openpowerdfs.com/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T08:57:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"openpowerdfs.com","ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2022-12-09","domain_rank":0,"first_seen":"2026-08-31T08:57:58.737817Z","last_seen":"2026-08-31T08:57:58.737817Z","alert_count":14,"request_count":14,"received_data":4144763,"sent_data":6839,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":87646,"first_seen":"2015-08-24T06:07:03Z","last_seen":"2026-08-29T08:04:55.344327Z","alert_count":0,"request_count":10,"received_data":18740,"sent_data":5578,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.dcloud.net.cn","ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":296858,"first_seen":"2018-09-15T09:18:08Z","last_seen":"2026-08-28T22:48:01.920941Z","alert_count":0,"request_count":2,"received_data":1005,"sent_data":1147,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.chaport.com","ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-07","domain_rank":504466,"first_seen":"2024-01-31T17:02:32Z","last_seen":"2026-08-24T03:22:50.105221Z","alert_count":0,"request_count":5,"received_data":664687,"sent_data":2609,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.280opht.com","ip":{"addr":"18.167.60.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-06-25T12:55:27.849182Z","last_seen":"2026-07-22T10:37:10.471265Z","alert_count":0,"request_count":1,"received_data":464,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","size":998,"data":"","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-31T10:48:20.600891Z","times_seen":1929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"93f942ac87c6357dbf45038af82578bb","sha1":"c3f080da8cfde8a4bd7a85ee1afe36abe8bd0086","sha256":"2f691fdd3229e5c86f16b3ceac60ee8fb17825184bd19165a8b0083ace142cac","sha512":"466ff098eb8c5d5fdfdbf125d90225cb69ba25204890e2d2d03b2b058db7ac8143e09722750678f1392736653f5bf4700a2f3c10d16ce13e85e3b02e1e9e8df3","ssdeep":"","tlshash":"0af0dc9eb90111362646303c677bc608b56bf2681748d74a859eed087c2adee8c14d1c","size":467,"data":"","first_seen":"2026-08-31T07:53:51.176624Z","last_seen":"2026-08-31T08:58:03.900313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/chunk-vendors.c10a76e5.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a66a175c988c64dfc2adbf86fca726ef","sha1":"35a534aef5851d5a93b620dcb70e68edfc8ad181","sha256":"8a215985a92b4bc0c050f79f029380baa7befb58ce87b5cda528db2955ed721d","sha512":"0673d074be2084ee7dde12f7d35b849151da5ac7589aec638b341009a0a755a9e026499edf1cee102186379c78bf7ad023609263d602407b6bea832f23fdbbf9","ssdeep":"6144:9fBjPPzHtrloHhQG0JdwuwEQoYGTumjSTssqOUJ4o9z:9fJXzHbJGDoLTfueJ4oJ","tlshash":"b3e4f79cb281b0a607e760f5003f220bb13b6968740a94d9f2b9e5d46d7dd8e6137f78","size":682106,"data":"","first_seen":"2026-08-31T07:53:51.139486Z","last_seen":"2026-08-31T08:58:03.885482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/index.2903e520.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1ac9a5a6e1c8167147657a204d41471","sha1":"6c6cadb670fd0e44dd0b1be9f9b3e7d91468231a","sha256":"a0ec05f33490d8e13c15d72c05cd69980423e9a89c3f6f3c4c0c56ed4762f6b1","sha512":"0b152bdf2ee22dc684da27c285c81f621f232ba0b2f1579ccf783051d181874a419aa868a812bdacebcaad82177eb17c1381851a48707b7fee345382754e169f","ssdeep":"3072:OQusyepMMgjaKOHy3SuBSIU6IUZQPryXDjOnPsC+NA13iX87YoVBnZScZA5tXnYe:Hus1fjbSiFmZQDAinPsI1XABtbJ","tlshash":"fc746c0c71cda6fa16936164246f611632363fa9d419e80596fed1cd0ee8bce9237b3c","size":368698,"data":"","first_seen":"2026-08-31T07:53:51.170468Z","last_seen":"2026-08-31T08:58:03.891785Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=6a7812f3dd4efc21a88d4cfc","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99878be537dca3b1a0d4cba783cea943","sha1":"8e5d5e4eac078a039cd179d6258a70cf90de8ff5","sha256":"7d5487d474cc23fed9eaa18954509d61f49a8bba9b5e5c56cb824f937581bf77","sha512":"134ef24d2ce7b8d6400b8c27f69857dd47363a054d7ccb4313187ba48e648dffe2c8d9795585e5ed83a50a5c35de086f60c00da42b4c3896444491aa0355056b","ssdeep":"","tlshash":"48e06811c6941ed55f68666dae0b17e674afc722cb54d3bca870db202406cd100a4c7d","size":383,"data":"","first_seen":"2026-08-31T07:53:51.129498Z","last_seen":"2026-08-31T08:58:03.889616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","size":83508,"data":"","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-08-31T10:48:20.42982Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/js/chunk-vendors.c13a7645.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dec90e2143f15d889fe0a9c1777088e","sha1":"52c4c5f4f7febc3eb3f7eb2c5f0d764ed4f13c8c","sha256":"e94bb0db7d34e603333e833d4f41742ab519ec92e53f493b8a417e621f90fd96","sha512":"8657bc0ff918781157e0f22b41460918be6d0d77df1917098ffd850864c59270e07175973e7280bdef16862b7e8ebd5b428c8c6a37a6fda5ac6a1df36bfe7daf","ssdeep":"6144:M6BOVU30FA73UmUXMwTfwOHnsHcNTlYbsvmRFO+QhXdv/z1/RgQepxLZw:MIg23U8wT4En2ct2NOHv/zwpQ","tlshash":"ac05f78df282b0b60ae760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6237f7d","size":845713,"data":"","first_seen":"2026-08-31T07:53:51.177948Z","last_seen":"2026-08-31T08:58:03.886511Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/js/index.ce6bdd02.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf10b3b399a63b91ab250839720019f","sha1":"e8f9a049daf4c4feabd5d938fc8154521625b6b5","sha256":"8b7067a34fd92251be718781618f86d83940e88beabe8ad9f204d7e5498a948e","sha512":"73fa434fc690fb1de57e28435873e3ccfa9821e5fe4b536e097dc4338b8f133952aa6005789a9a01865d2793715b13c07270241e86e29985b6d6dff9524dca42","ssdeep":"3072:XiYP7PryXvoOFYk8subBtuurG1eusyepMMgF20JOHy3SbA5tgG3sbTnsvzVctpbk:vDo8subBtuuy1eus1fhSidpxAf","tlshash":"87746c0c71cda6fa16936164242f611632363fa9d459e41196fee1cd0ee8bce9237b3c","size":363612,"data":"","first_seen":"2026-08-31T07:53:51.179561Z","last_seen":"2026-08-31T08:58:03.887427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/views-guide-index.0111e481.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f14c18a033e9cab9b7e3ddb57a611825","sha1":"ed39d06ee59579adece9db3620649e1b2319e8c5","sha256":"20b1e3742098c562062192ef6d87f77c5b62e1cdd4b41938e42d78f3e3245ae6","sha512":"27492fa2f83b6d87b183f8e521f63da9dfe4e944953647fc5afeb04d36139b1820dc69070a9e9d2445f38af2e8be21b5616bdddbd500c58721e5f5d44939e58a","ssdeep":"96:M3qRsohO03GDkwTiODdb9zXAB2fvQG4AcCwmh:M3qRsHkwjb5N4AcCwmh","tlshash":"13b1e85571cbb04a0c2b90405d7b49bc90252e589126e484cbb5babf4af1ecf233af9c","size":5180,"data":"","first_seen":"2026-08-31T07:53:51.128101Z","last_seen":"2026-08-31T08:58:03.882845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"65cbf911501a0de13afb9d1cb71933cb","sha1":"e9236ab09f15becfa6d86aeb5995fc896f1aab1b","sha256":"e92027b36a47b6e3c2e1c084ac31e8e7e6a4b904bbaa42d241ccf7f4e48d7a62","sha512":"a619c7409dd01aa33de6a1eb397188a42da076126f727c119ed69455158ccff9421daec4d8135dfee4e719b1d62aa70bc767f4430238da97714805c43655cc35","ssdeep":"384:Brt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSLcg:MwXkPGdg7HnqhSTGlnLbcqwg","tlshash":"70c22c48b7e17d54435a34b3223f4a063bb51652545a3240f016c2e9bf78e8b91beeed","size":27399,"data":"","first_seen":"2025-09-01T08:05:49.861005Z","last_seen":"2026-08-31T10:48:20.566685Z","times_seen":1573,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"93f942ac87c6357dbf45038af82578bb","sha1":"c3f080da8cfde8a4bd7a85ee1afe36abe8bd0086","sha256":"2f691fdd3229e5c86f16b3ceac60ee8fb17825184bd19165a8b0083ace142cac","sha512":"466ff098eb8c5d5fdfdbf125d90225cb69ba25204890e2d2d03b2b058db7ac8143e09722750678f1392736653f5bf4700a2f3c10d16ce13e85e3b02e1e9e8df3","ssdeep":"","tlshash":"0af0dc9eb90111362646303c677bc608b56bf2681748d74a859eed087c2adee8c14d1c","size":467,"data":"","first_seen":"2026-08-31T07:53:51.176624Z","last_seen":"2026-08-31T08:58:03.900313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"openpowerdfs.com/static/opensea/favicon.png","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:14.080Z","timestamp":1788166634080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /static/opensea/favicon.png HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 17:40:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f5328-1d4f\"\r\nexpires: Wed, 30 Sep 2026 08:57:14 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7503,"size_decoded":7837,"mime_type":"image/png","magic":"PNG image data, 529 x 530, 8-bit colormap, non-interlaced","md5":"1ea31c2d6e54b23bdbb732288aac8489","sha1":"a2b7f938919efe9a3962c25b12ae43641111d81b","sha256":"b27942923487b19b73fe14b3d338f0734bf8f46c68c9376000c09139df6e0b65","sha512":"45a6e0b628cbad91e76f83f97165107e9cd9361eb4204ea5e2c6c1731d2d3b0a60e422efb9389b88b9048054adf5dd4b9c0d766b8a97e3e668ec7a528a7b2dbc","ssdeep":"192:Ou20T2p+od5aqJYn9AQjtLqFDi+ackMJPuKIlNynSCW3DR:vT2Ui0qJcj5qFDFackMJPu1Nynnk","tlshash":"52f19fcb5024800df55fb4a5e9d2704c0c1a276c865553ea466dddf1f32348de6fa872","first_seen":"2026-06-25T12:55:35.007459Z","last_seen":"2026-08-31T08:58:03.878638Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1884,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1884,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:57:16.772Z","timestamp":1788166636772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Aug 2026 17:54:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563a-7a7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1959,"size_decoded":1072,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1327), with CRLF line terminators","md5":"423e8115e9891165194a7c3a932dbe1e","sha1":"54303f5546bb274ea7f306ceeb7d412e21699075","sha256":"f9578da3e7ff46a090a762a3a002b9d1ef2eaab84b99cc1193c6dfa2ba5091db","sha512":"4304b45399cb90f2079aced65f11ea020fc3aa9725573fdfcdaa39473ab144797b028f5322bd44c816ef326be2076082967db679a459afd5a5ca6f66416edfb8","ssdeep":"","tlshash":"1f41f06b1c10a13f33a40034d97bf1689e2899d94364e896b6cccdd84e81fd8cdbea18","first_seen":"2026-08-31T07:53:51.168296Z","last_seen":"2026-08-31T08:58:03.879546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/opensea/logo.png","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.616Z","timestamp":1788166639616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/opensea/logo.png HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 17:54:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563c-a0dd\"\r\nexpires: Wed, 30 Sep 2026 08:57:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41181,"size_decoded":40029,"mime_type":"image/png","magic":"PNG image data, 3546 x 928, 8-bit colormap, non-interlaced","md5":"51ac142973c554fb16efaeb76abca7a4","sha1":"168e61356b7fd6305731b7633a3129bf77fd1d7b","sha256":"28c38b55c676cd81e67fcd5725c98729b073d85ce9937e07fda4c00055d56ad3","sha512":"864e035c1cb9d2ddb904a06eab0d1da2fc225e8bfa766c3f39f5748e1480a2c205808e5b182e5473fe2bef6d0c63fc4c6290f9f8fafd1457b6030c103c8fba77","ssdeep":"768:41x7aF1/Kb+WK2acTiC6SFb9OngasaI+8RDKeEPihEekMVhZD0/NU7sb:4P7aFlKJhTiC6Sx0nF8AVPih5kEM672","tlshash":"b403f1d0eace90b8e423c5b19497455915332f5c66ec9d9b00b2b97bde2cb10b98f9c2","first_seen":"2026-06-25T12:55:34.988199Z","last_seen":"2026-08-31T08:58:03.881209Z","times_seen":9,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:17.638Z","timestamp":1788166637638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 13:41:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zfro7e2%2BQ%2F%2FmRgmqxgAp%2FhX4pT7NcwTKxH4H%2BKvZ%2FHlaAuVhfWgTFh2jXgx0B8HrAaBylFbx29idzcId6%2BGcj81292gsP80cS85GfkMW0aNGcy8NMU6MJ%2BaBe054tQRXQ%3D%3D\"}]}\r\nage: 890665\r\ncf-cache-status: HIT\r\netag: W/\"6a870417-3e6\"\r\ncontent-encoding: br\r\ncf-ray: a33ad3ad3a6bb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":1319,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-31T10:48:20.600891Z","times_seen":1929,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/views-guide-index.0111e481.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.325Z","timestamp":1788166639325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/js/views-guide-index.0111e481.js HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 17:54:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563a-143c\"\r\nexpires: Mon, 31 Aug 2026 20:57:19 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5180,"size_decoded":2594,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4678), with no line terminators","md5":"f14c18a033e9cab9b7e3ddb57a611825","sha1":"ed39d06ee59579adece9db3620649e1b2319e8c5","sha256":"20b1e3742098c562062192ef6d87f77c5b62e1cdd4b41938e42d78f3e3245ae6","sha512":"27492fa2f83b6d87b183f8e521f63da9dfe4e944953647fc5afeb04d36139b1820dc69070a9e9d2445f38af2e8be21b5616bdddbd500c58721e5f5d44939e58a","ssdeep":"96:M3qRsohO03GDkwTiODdb9zXAB2fvQG4AcCwmh:M3qRsHkwjb5N4AcCwmh","tlshash":"13b1e85571cbb04a0c2b90405d7b49bc90252e589126e484cbb5babf4af1ecf233af9c","first_seen":"2026-08-31T07:53:51.128101Z","last_seen":"2026-08-31T08:58:03.882845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/6a7812f3dd4efc21a88d4cfc-deb2fec15f3988205073421b64479ce5fb9744442d1d222f1afc0d7f8d48975d","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:22.808Z","timestamp":1788166642808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/accounts/6a7812f3dd4efc21a88d4cfc-deb2fec15f3988205073421b64479ce5fb9744442d1d222f1afc0d7f8d48975d HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://openpowerdfs.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\ncache-control: public, max-age=31536000, immutable, no-store\r\nvary: Origin, accept-encoding\r\netag: W/\"735-uGq/6/xIDHCMyhL07qIozJEfIYc\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 3851\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPoUpC%2BV4RPamu1nJNdXGBKVIzaVb0Ag3DgiUrpr7z8atNkuKP21uTA9Pvw%2FJMyaZ1IJHKmLigjLkJ%2BFcHC5p8%2Bp%2BnrxtUnJcHSaA2sWDAIEuvXTXkUjYDVQq4a93bx42g%3D%3D\"}]}\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a33ad3cd9d20b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1845,"size_decoded":1842,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3ca051c7d279c390f06c1b6c09a4a695","sha1":"b86abfebfc480c708cca12f4eea228cc911f2187","sha256":"deb2fec15f3988205073421b64479ce5fb9744442d1d222f1afc0d7f8d48975d","sha512":"50697b66d80c839169933c40dddf54822c3141fe533c287bfbea7987bff276cd05cbb38ee139d444e9cb43248d39b2ea0ee0d8f04bebbe61c4bb687361700373","ssdeep":"","tlshash":"8331006e34801c7e8bc6531abc9a7f630b6c7133a284181ee0dddf6866eb49a9153547","first_seen":"2026-08-31T07:53:51.144597Z","last_seen":"2026-08-31T08:58:03.884274Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/chunk-vendors.c10a76e5.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:17.082Z","timestamp":1788166637082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/js/chunk-vendors.c10a76e5.js HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 17:54:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563a-a687a\"\r\nexpires: Mon, 31 Aug 2026 20:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":682106,"size_decoded":215433,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65525), with no line terminators","md5":"a66a175c988c64dfc2adbf86fca726ef","sha1":"35a534aef5851d5a93b620dcb70e68edfc8ad181","sha256":"8a215985a92b4bc0c050f79f029380baa7befb58ce87b5cda528db2955ed721d","sha512":"0673d074be2084ee7dde12f7d35b849151da5ac7589aec638b341009a0a755a9e026499edf1cee102186379c78bf7ad023609263d602407b6bea832f23fdbbf9","ssdeep":"6144:9fBjPPzHtrloHhQG0JdwuwEQoYGTumjSTssqOUJ4o9z:9fJXzHbJGDoLTfueJ4oJ","tlshash":"b3e4f79cb281b0a607e760f5003f220bb13b6968740a94d9f2b9e5d46d7dd8e6137f78","first_seen":"2026-08-31T07:53:51.139486Z","last_seen":"2026-08-31T08:58:03.885482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/js/chunk-vendors.c13a7645.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:11.157Z","timestamp":1788166631157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /static/js/chunk-vendors.c13a7645.js HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 17:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f5326-ce791\"\r\nexpires: Mon, 31 Aug 2026 20:57:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":845713,"size_decoded":259341,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43770)","md5":"0dec90e2143f15d889fe0a9c1777088e","sha1":"52c4c5f4f7febc3eb3f7eb2c5f0d764ed4f13c8c","sha256":"e94bb0db7d34e603333e833d4f41742ab519ec92e53f493b8a417e621f90fd96","sha512":"8657bc0ff918781157e0f22b41460918be6d0d77df1917098ffd850864c59270e07175973e7280bdef16862b7e8ebd5b428c8c6a37a6fda5ac6a1df36bfe7daf","ssdeep":"6144:M6BOVU30FA73UmUXMwTfwOHnsHcNTlYbsvmRFO+QhXdv/z1/RgQepxLZw:MIg23U8wT4En2ct2NOHv/zwpQ","tlshash":"ac05f78df282b0b60ae760b5403f220bb2376959b40ac4d4f675e4d4ad7894e6237f7d","first_seen":"2026-08-31T07:53:51.177948Z","last_seen":"2026-08-31T08:58:03.886511Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/js/index.ce6bdd02.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:11.159Z","timestamp":1788166631159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /static/js/index.ce6bdd02.js HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 17:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f5326-58c5c\"\r\nexpires: Mon, 31 Aug 2026 20:57:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":363612,"size_decoded":105934,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59658), with no line terminators","md5":"6cf10b3b399a63b91ab250839720019f","sha1":"e8f9a049daf4c4feabd5d938fc8154521625b6b5","sha256":"8b7067a34fd92251be718781618f86d83940e88beabe8ad9f204d7e5498a948e","sha512":"73fa434fc690fb1de57e28435873e3ccfa9821e5fe4b536e097dc4338b8f133952aa6005789a9a01865d2793715b13c07270241e86e29985b6d6dff9524dca42","ssdeep":"3072:XiYP7PryXvoOFYk8subBtuurG1eusyepMMgF20JOHy3SbA5tgG3sbTnsvzVctpbk:vDo8subBtuuy1eus1fhSidpxAf","tlshash":"87746c0c71cda6fa16936164242f611632363fa9d459e41196fee1cd0ee8bce9237b3c","first_seen":"2026-08-31T07:53:51.179561Z","last_seen":"2026-08-31T08:58:03.887427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2719,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:14.993Z","timestamp":1788166634993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 31 Aug 2026 15:57:15 GMT\r\ncache-control: max-age=25200\r\nset-cookie: __uni__uid=rBACaWqVQet46vIrBM1yAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__uni__uid","value":"rBACaWqVQet46vIrBM1yAg==","quoted":false,"path":"/","domain":"dcloud.net.cn","raw_expires":"Thu, 31-Dec-37 23:55:55 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__uni__uid=rBACaWqVQet46vIrBM1yAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=dcloud.net.cn; path=/; secure; httponly; samesite=none"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":577,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-31T08:58:03.888326Z","times_seen":20401,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":0,"dns":3,"connect":244,"send":0,"wait":243,"receive":0,"ssl":485},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/opensea/favicon.png","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.494Z","timestamp":1788166639494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/opensea/favicon.png HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 17:54:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563c-1d4f\"\r\nexpires: Wed, 30 Sep 2026 08:57:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7503,"size_decoded":7837,"mime_type":"image/png","magic":"PNG image data, 529 x 530, 8-bit colormap, non-interlaced","md5":"1ea31c2d6e54b23bdbb732288aac8489","sha1":"a2b7f938919efe9a3962c25b12ae43641111d81b","sha256":"b27942923487b19b73fe14b3d338f0734bf8f46c68c9376000c09139df6e0b65","sha512":"45a6e0b628cbad91e76f83f97165107e9cd9361eb4204ea5e2c6c1731d2d3b0a60e422efb9389b88b9048054adf5dd4b9c0d766b8a97e3e668ec7a528a7b2dbc","ssdeep":"192:Ou20T2p+od5aqJYn9AQjtLqFDi+ackMJPuKIlNynSCW3DR:vT2Ui0qJcj5qFDFackMJPu1Nynnk","tlshash":"52f19fcb5024800df55fb4a5e9d2704c0c1a276c865553ea466dddf1f32348de6fa872","first_seen":"2026-06-25T12:55:35.007459Z","last_seen":"2026-08-31T08:58:03.878638Z","times_seen":9,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/images/chaport-launcher-chat-icon-new.png","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:23.060Z","timestamp":1788166643060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /images/chaport-launcher-chat-icon-new.png HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://assets.chaport.com/assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 468\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Aug 2026 10:55:39 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LrvbsMrKALmQ3WarvqM%2BASmPfF83kfiCb%2BIzSFh2LVprtNpJw%2BGW8qTysGvMtpbjqxoM7FrrXvuYEaXEnl%2B1QUdNrY2clkiCbhAU3NyhzYkHi0nvKTeL6AW4%2B7OTLkksUe3Gg%3D%3D\"}]}\r\netag: \"6a91692b-2fa\"\r\nexpires: Wed, 30 Sep 2026 01:09:56 GMT\r\ncache-control: max-age=2592000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=762\r\ncf-bgj: imgq:100,h2pri\r\nage: 28046\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: a33ad3cf2983b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468,"size_decoded":1485,"mime_type":"image/png","magic":"PNG image data, 32 x 36, 8-bit gray+alpha, non-interlaced","md5":"c893cdbf01d4901c895649e653607876","sha1":"53f42045c25f8732c60fac3687e1d6c3c8a75331","sha256":"aa4cae387402003c90d9dce3355e6fcb43c1886a5a3d8f1006c62458a34954f1","sha512":"8b603e4019d23225c936f21e81f8a3519170a714f8d3107452de4561d7b61b3ba180c8c903ba56864e5932f7c21da2d2bce3e60e0d75d132a25acf809344c997","ssdeep":"","tlshash":"81f00ed70348121ed3c211212b1289b8845162b485d02f15f80e8604976926432cb7b3","first_seen":"2024-03-02T20:53:41Z","last_seen":"2026-08-31T10:48:20.581052Z","times_seen":1847,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=6a7812f3dd4efc21a88d4cfc","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:14.794Z","timestamp":1788166634794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=6a7812f3dd4efc21a88d4cfc HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:14 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\netag: W/\"17f-jl1eTqwHigOc0XnWJYpwz5Dej/U\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xx6K2ax9O3gu%2BNlG26UQwNLO5niQWZ6beyUWtwKAmrJVvMnlF4EsY%2BtjnZbAb0LZ2POF7jbHhUKOlR0uA%2BCulPqZWQ2EzN0vNNVdQYjTcprP2cqYEmhdrAwcyzFcX%2FkZkQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a33ad39b7b04b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":383,"size_decoded":1067,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"99878be537dca3b1a0d4cba783cea943","sha1":"8e5d5e4eac078a039cd179d6258a70cf90de8ff5","sha256":"7d5487d474cc23fed9eaa18954509d61f49a8bba9b5e5c56cb824f937581bf77","sha512":"134ef24d2ce7b8d6400b8c27f69857dd47363a054d7ccb4313187ba48e648dffe2c8d9795585e5ed83a50a5c35de086f60c00da42b4c3896444491aa0355056b","ssdeep":"","tlshash":"48e06811c6941ed55f68666dae0b17e674afc722cb54d3bca870db202406cd100a4c7d","first_seen":"2026-08-31T07:53:51.129498Z","last_seen":"2026-08-31T08:58:03.889616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/index.css","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:17.080Z","timestamp":1788166637080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/index.css HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:17 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 17:54:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563a-17f86\"\r\nexpires: Mon, 31 Aug 2026 20:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98182,"size_decoded":27415,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"53c6b28515f1a1c3892442b7b843d596","sha1":"488401227bca1ed6806285fecbdbc89ec3f147fd","sha256":"f62bf853d2338897e8c298109becd21c0f3a9b14462ccf7f16f70c3cb7a5efe8","sha512":"69c4e2eba91328677cea49a96b90196e4f89af5539443603ab9ed6a616a89c227cb8741c5cb01215318211f9251f2c5fc6ce3cf1cb9b05c3dae555313b864829","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGgv7eh/nLhlvbc:hApuK7hmV+S1Wu3iGH1nLPI","tlshash":"f5a3f73719012e39e52bcd26b6c1ab5a1e60c033e15307adfbb476288bcf9c9167b745","first_seen":"2026-07-04T00:29:50.545322Z","last_seen":"2026-08-31T08:58:03.89095Z","times_seen":38,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/js/index.2903e520.js","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:17.083Z","timestamp":1788166637083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/js/index.2903e520.js HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:17 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 14 Aug 2026 17:54:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563a-5a03a\"\r\nexpires: Mon, 31 Aug 2026 20:57:17 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368698,"size_decoded":104985,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56444), with no line terminators","md5":"f1ac9a5a6e1c8167147657a204d41471","sha1":"6c6cadb670fd0e44dd0b1be9f9b3e7d91468231a","sha256":"a0ec05f33490d8e13c15d72c05cd69980423e9a89c3f6f3c4c0c56ed4762f6b1","sha512":"0b152bdf2ee22dc684da27c285c81f621f232ba0b2f1579ccf783051d181874a419aa868a812bdacebcaad82177eb17c1381851a48707b7fee345382754e169f","ssdeep":"3072:OQusyepMMgjaKOHy3SuBSIU6IUZQPryXDjOnPsC+NA13iX87YoVBnZScZA5tXnYe:Hus1fjbSiFmZQDAinPsI1XABtbJ","tlshash":"fc746c0c71cda6fa16936164246f611632363fa9d419e80596fed1cd0ee8bce9237b3c","first_seen":"2026-08-31T07:53:51.170468Z","last_seen":"2026-08-31T08:58:03.891785Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/stats/trigger-views","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:34.708Z","timestamp":1788166654708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"POST /api/public/v1/stats/trigger-views HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nCP-App-Id: 6a7812f3dd4efc21a88d4cfc\r\nContent-Type: application/json\r\nContent-Length: 40\r\nOrigin: https://openpowerdfs.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":40,"data":"{\"triggerId\":\"6a7812f3dd4efc21a88d4d00\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ko1Mqcn86ymRubSY0MHLf6tewg7nXEwG82HvJLeYyub7XXXnyey87s0SMnGh8OH5TR3Bb8w9DszOMbjs4Z9qHpqCVdA0Xf10w%2FILxC%2FBI5DnTQCsYFj5woSsWSVf6ga6zA%3D%3D\"}]}\r\ncf-ray: a33ad4182f94b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":896,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-08-31T13:27:51.481158Z","times_seen":186581,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/font/81f255edf7f746ee-s.p.woff2","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.613Z","timestamp":1788166639613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /static/font/81f255edf7f746ee-s.p.woff2 HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14792\r\nlast-modified: Fri, 14 Aug 2026 17:40:56 GMT\r\netag: \"6a7f5328-39c8\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14792,"size_decoded":15064,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14792, version 1.0","md5":"64821d283673e4b70f5ec04aea8e6d1e","sha1":"f968585c19f814b84a562b511850ed48a8bf3033","sha256":"825db55e585a137a9f0544a033ba129576efd48b58abba7c871014e9a3b04707","sha512":"718ea6cea858aeba2c2e6f9e83d58551ad3387b2a406cfc64bf42210392ceac1e4be047aaa95db5ffe3c8668198a97c88f3b41416a757e351fca4e8778970597","ssdeep":"192:b2+sT7gBQO/2RL6/c+5+yf9gc0v1Ss2d5UvwSH88sl8Wg7ETlnsHVCjhv7EuM851:b4Ti+R65fSkD54wSHoqWg7EuHkpIuDj","tlshash":"c162d04cc77ce08df913d2b11449a7b2837310fca84a2bb45d8f1492bf56c9a4a81e24","first_seen":"2025-06-28T08:39:25.090868Z","last_seen":"2026-08-31T08:58:03.893475Z","times_seen":51,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/sounds/bellAndBubble.mp3","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:22.902Z","timestamp":1788166642902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /sounds/bellAndBubble.mp3 HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://openpowerdfs.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 28830\r\nserver: cloudflare\r\nlast-modified: Fri, 28 Aug 2026 10:55:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a91692b-709e\"\r\nexpires: Wed, 30 Sep 2026 07:53:11 GMT\r\ncache-control: max-age=2592000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 3850\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfPCvK4lTxsCvKSYM2WnoNQpUzmq4IpZaInAz3qtslpf6rLylLog3%2FVe21fuzDiudH5zSNwRWRzWzpQKhRiWNDGX%2FzbVVRIkHNDWIQGeB9%2BdQaTaU7YMf1nt%2BsGIXdmxl1rQ6w%3D%3D\"}]}\r\ncf-ray: a33ad3ce2e96b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28830,"size_decoded":29751,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"4e6689b653d59f3f9b8cd88cce463a4a","sha1":"7eecc5b50eb8003baf68c2a8bcddaffc062391f9","sha256":"33201ea131f20acb2298b4eac960b939b1ded41ed2698bb325843f205524877d","sha512":"309ac42474682287b54811f6f8e629a8f5655b614f7183bdf80653263a1ed89263b723d8053df9ee0f8b16b581202cbd634fae147661ef6f48b45531cb56a733","ssdeep":"192:9fVGvxZQqYXaWEYtLDsfjshy4l7l7/NxspnyOyDqTJtLqmP/qvQ5IdibE+1RdAs9:9fkxvWdPIAhyG77cwDwem6vwcib1a","tlshash":"c1d2496173e39289e5a14b7c31a3db64ffd2ed81606dea4b52aa3b00627c385b4504f6","first_seen":"2023-12-01T05:00:13Z","last_seen":"2026-08-31T08:58:03.893994Z","times_seen":257,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/static/index.css","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:11.155Z","timestamp":1788166631155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /static/index.css HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:11 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 14 Aug 2026 17:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f5326-17f86\"\r\nexpires: Mon, 31 Aug 2026 20:57:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98182,"size_decoded":27415,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"53c6b28515f1a1c3892442b7b843d596","sha1":"488401227bca1ed6806285fecbdbc89ec3f147fd","sha256":"f62bf853d2338897e8c298109becd21c0f3a9b14462ccf7f16f70c3cb7a5efe8","sha512":"69c4e2eba91328677cea49a96b90196e4f89af5539443603ab9ed6a616a89c227cb8741c5cb01215318211f9251f2c5fc6ce3cf1cb9b05c3dae555313b864829","ssdeep":"1536:qlIApuK7hmVmU2RS1Wu3xdynGgv7eh/nLhlvbc:hApuK7hmV+S1Wu3iGH1nLPI","tlshash":"f5a3f73719012e39e52bcd26b6c1ab5a1e60c033e15307adfbb476288bcf9c9167b745","first_seen":"2026-07-04T00:29:50.545322Z","last_seen":"2026-08-31T08:58:03.89095Z","times_seen":38,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/insert-main-44130e3574b7e1b9a766249043f659de.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.380Z","timestamp":1788166639380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /assets/insert-main-44130e3574b7e1b9a766249043f659de.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27319\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Aug 2026 09:45:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a7aef4f-6ab7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 1712349\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=roK0JF0slTRK1xHctk4fFOEJTl%2F%2FpzONt59ajzIFRKx66affr0GmBf%2FeIGeIbsJeOCisRQFDpD3vb%2B8XXF2Rgdl%2Br8YiHBMl2F%2BUWSF5ZX5A6mnfuPjcDXOiJYY%2BP4JQ3demSw%3D%3D\"}]}\r\ncf-ray: a33ad3b82d20b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83508,"size_decoded":28287,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"56db69a15fd0e641ce5559d3e4f700be","sha1":"401c15c1fcf0e8157177c3f03eae7d94983d8316","sha256":"c2e80cfcb8f09eb3c75630de54602ef3d460434ab825b2f20d17d94a0e7170ea","sha512":"32a30d76e464219b72e7da5dd68ea15c9d394518495a17e28ad89ee69e74795c55e69b71718c2d72b78aa701eaedcb44ef02c09d7e54c2b93aafce081a966f70","ssdeep":"1536:a6VmkhM1hDaYGcvezlk516w8N6Od9T2KBjtrEjv4SpkHBKlqWfw2:ZQc4yk5yKp5ffL","tlshash":"cb8329897040343b0aeb21b6357f310a213fe2696e495460b53ad7d07e7ae5b621bf7c","first_seen":"2026-08-11T14:07:40.77286Z","last_seen":"2026-08-31T10:48:20.42982Z","times_seen":60,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/pc/static/opensea/guide.png","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.617Z","timestamp":1788166639617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET /pc/static/opensea/guide.png HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 14 Aug 2026 17:54:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f563c-1876fe\"\r\nexpires: Wed, 30 Sep 2026 08:57:19 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1603326,"size_decoded":1591375,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 1614x975, components 3","md5":"9e2db209ac20daad8adcb575c93ffb40","sha1":"b998e6122e08eec8a88c2b12f6eb3fb80985ae5e","sha256":"82ed41e7d12d77499e3177e8dfd39e1378320fdbd0223a066fc49011f0a92f8b","sha512":"f0bd86dd127f8abfedbf5b130e4e2822c4776db6a3a754fb923c6465a8137c78f4872157664c98891602a4066386c61d4bb50a8074eda906f587236b11f065e1","ssdeep":"24576:8kzXcTa/mcGRDcl19N3oVFev8IE/9LUErH8XyjQdASw4sh78Ml22t:8kzIaejmxdoVFekPSCjQdnq78W22t","tlshash":"942533559d2b82bbccf8b33579d7ba81be3123d99488202018fd6d8a55e91bc7583d31","first_seen":"2026-06-25T12:55:34.998034Z","last_seen":"2026-08-31T08:58:03.89505Z","times_seen":9,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:23.016Z","timestamp":1788166643016,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /assets/widget-373e7c0d4c3f51f8ec147557832fcb42.css HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:23 GMT\r\ncontent-type: text/css\r\ncontent-length: 40135\r\nserver: cloudflare\r\nlast-modified: Tue, 11 Aug 2026 09:44:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a7aef17-9cc7\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nage: 443664\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T9QTl7m1EuwrAgUBgb2Ez7O4ekoHO%2F4iCaD8K56zB51jNkpr%2BED0Xu6IwO5WxyRdqSYxhL1D9yuwbTBOTAHhjcB%2FLykAUm%2Fc75SLrvaqQdA6BVjPRDAL1EAr%2BNOWHcZEyRi%2F9Q%3D%3D\"}]}\r\ncf-ray: a33ad3ced8cfb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519702,"size_decoded":41086,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d6a41c0e43032ad269bbc0abf76680f6","sha1":"93f4b18e17598f13366ef1ef1ead8732a9c23f0c","sha256":"fb30056e6d7570f3f6ecc11fefab1bf262bbf1680bbbb3d6b0289a6a9f7db391","sha512":"e3c660aa865557c0d0f33a30963dfa3879f8ae1d7399b4be29baffc216a4b744248a4bbb62eaabaacd3e7d374cb5cabad9d9a170424d769f1282dd77b050cb90","ssdeep":"1536:jCSnHfJOjr4YP+CQ/mOwT4FjFTa+02FJAMYncA7hN67+qrqUixyii/SYJM1aGV6Y:nOxOweM","tlshash":"14b4c9409495291b6cb3293f348772591d3fe022c79329ee7569e3ecc38bd635262f89","first_seen":"2026-08-11T14:07:40.757302Z","last_seen":"2026-08-31T10:48:20.580325Z","times_seen":55,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/operators","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:34.579Z","timestamp":1788166654579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"OPTIONS /api/public/v1/operators HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: cp-app-id\r\nReferer: https://openpowerdfs.com/\r\nOrigin: https://openpowerdfs.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 08:57:34 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvoBc%2FNa3%2FiYp%2BjNfCVXYXkdRNnbh0NnrxotuwlALkAKpMMukESqdk58mK%2F%2BPtPs4xDuPGTHWDhxiAWXhRkmXXGaK%2B6LqIBg2Hc7uLiOd%2FRVFpbu6E4v9KOY2wQLa7ZSrQ%3D%3D\"}]}\r\ncf-ray: a33ad4172ca5b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":657,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/stats/trigger-views","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:34.710Z","timestamp":1788166654710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"OPTIONS /api/public/v1/stats/trigger-views HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,cp-app-id\r\nReferer: https://openpowerdfs.com/\r\nOrigin: https://openpowerdfs.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Mon, 31 Aug 2026 08:57:34 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJ86tGHQHooGGbLLX4MvoN%2BWOnxPnBk6477z6SCJbIH2zYE4esNKjjb89tgbAzu%2FsCQ5tT4YxpcMb8LDBf9UiR%2BDiBi7qzdgMxhyy9MlH5qK3dnoSSExkikptbwVv2pXXQ%3D%3D\"}]}\r\ncf-ray: a33ad417ff0eb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":649,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openpowerdfs.com/","fqdn":"openpowerdfs.com","domain":"openpowerdfs.com","tld":"com"},"ip":{"addr":"207.56.3.35","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T08:57:09.517Z","timestamp":1788166629517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"seapowersd.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 06:45:49 GMT","end":"Sat, 21 Nov 2026 06:45:48 GMT"},"fingerprint":{"sha1":"21:07:F6:2A:6D:DD:7C:1B:E6:14:23:9A:14:69:88:0A:86:48:DA:58","sha256":"00:8F:54:9E:A6:45:FB:41:BD:F1:FF:12:6C:08:F9:33:1E:C1:27:A3:BF:F8:1C:F4:C6:B0:61:12:ED:DA:3C:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: openpowerdfs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:10 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 14 Aug 2026 17:40:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7f5326-854\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2132,"size_decoded":1160,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1321), with CRLF line terminators","md5":"211e002ecb3ea84e019526c215849b2c","sha1":"881977b960e4a1f9de5a4c74ac3f0fd6b0da4144","sha256":"c27214ecbb43ad5e7b5a8a9863572b9060a3a49e455cfc39a6b6e167dfae1978","sha512":"ed495ca63857f0449bf028f88ab0017f3764edf82e39bc83bfbbeb27ddc4f811de749031adcdff06e5ef79939f24cbdd14479b2b63a81b6e5d6601659380c468","ssdeep":"","tlshash":"ee41116f5c10a12f33a40065997bf16c9e68d9cc4354a896b6c8dde85dc1ac8ce7f618","first_seen":"2026-08-31T07:53:51.157696Z","last_seen":"2026-08-31T08:58:03.896789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1424,"timings":{"blocked":0,"dns":75,"connect":267,"send":0,"wait":267,"receive":0,"ssl":815},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"openpowerdfs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/javascripts/insert.js","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/","date":"2026-08-31T08:57:12.172Z","timestamp":1788166632172,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/insert.js HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Aug 2026 13:41:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESVo57FcLimJcgeFZeDqOyZ2m9f4hEWcvcKLaAb2s5tiT8BvMNRR%2Fe1b950XTew%2BdJBTGozqvnWn05dgOFQmVuAEXmtYwZyDhB25FihvCPCHuCkOyG4II%2BlSWrITaTKYnA%3D%3D\"}]}\r\nage: 890659\r\ncf-cache-status: HIT\r\netag: W/\"6a870417-3e6\"\r\ncontent-encoding: br\r\ncf-ray: a33ad38b3d44b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":998,"size_decoded":1309,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (998), with no line terminators","md5":"29d2e99d5fcb02404184a538c82b6254","sha1":"ef4318b50add95249beac94e8433544a180f3960","sha256":"27b579092e300cf8d2457274b442dc87db8a173d97c72e19b41ba1d90c613c31","sha512":"76aa1c05f8bd676ec62cdd147fddd7c472b5e8241806ce2a4b0e6d72590237969e3652c442ec06fa7fd84be60c1a0f41d7167f37a1bf8cefaecbf23f89feadb6","ssdeep":"","tlshash":"5211be11a565905b0db92176bb2b730eb4bff7168a4c9a44291df6003b038d3a826cf9","first_seen":"2025-03-16T17:07:37.611527Z","last_seen":"2026-08-31T10:48:20.600891Z","times_seen":1929,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":49,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/info/widget-assets?jsonpCallback=true\u0026id=6a7812f3dd4efc21a88d4cfc","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.336Z","timestamp":1788166639336,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /info/widget-assets?jsonpCallback=true\u0026id=6a7812f3dd4efc21a88d4cfc HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\netag: W/\"17f-jl1eTqwHigOc0XnWJYpwz5Dej/U\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6ZqGg%2BpJst9Z90A4O2SoXiufG5utKlVIseNnFVVHt9rpqiTSmsc45gzycWPeRsnfNguMVjV2TdI4FXyFxl1auW9SUZZwSY3crGPITYE%2Bbrwf2GAOlXVQi5GR3Zvkht5Qw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a33ad3b7dc1bb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":383,"size_decoded":1063,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (383), with no line terminators","md5":"99878be537dca3b1a0d4cba783cea943","sha1":"8e5d5e4eac078a039cd179d6258a70cf90de8ff5","sha256":"7d5487d474cc23fed9eaa18954509d61f49a8bba9b5e5c56cb824f937581bf77","sha512":"134ef24d2ce7b8d6400b8c27f69857dd47363a054d7ccb4313187ba48e648dffe2c8d9795585e5ed83a50a5c35de086f60c00da42b4c3896444491aa0355056b","ssdeep":"","tlshash":"48e06811c6941ed55f68666dae0b17e674afc722cb54d3bca870db202406cd100a4c7d","first_seen":"2026-08-31T07:53:51.129498Z","last_seen":"2026-08-31T08:58:03.889616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.280opht.com/font/config","fqdn":"api.280opht.com","domain":"280opht.com","tld":"com"},"ip":{"addr":"18.167.60.221","port":443,"asn":16509,"as":"AMAZON-02","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:19.605Z","timestamp":1788166639605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.280opht.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 01:22:03 GMT","end":"Fri, 20 Nov 2026 01:22:02 GMT"},"fingerprint":{"sha1":"D8:AB:39:A8:93:E0:29:78:0A:AF:A0:63:FC:F5:C0:0D:4B:D4:4C:69","sha256":"32:6A:30:CA:0F:D9:8F:83:52:CE:33:CF:F1:D6:74:5B:F6:B4:F1:58:82:98:99:E8:7E:19:A5:10:BE:2A:00:5B"}}},"request":{"raw":"OPTIONS /font/config HTTP/1.1\r\nHost: api.280opht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,form-type\r\nReferer: https://openpowerdfs.com/\r\nOrigin: https://openpowerdfs.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:20 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: content-type, form-type\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":464,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":1167,"timings":{"blocked":0,"dns":98,"connect":267,"send":0,"wait":268,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dcloud.net.cn/img/shadow-grey.png","fqdn":"cdn.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.217","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:20.660Z","timestamp":1788166640660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /img/shadow-grey.png HTTP/1.1\r\nHost: cdn.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nCookie: __uni__uid=rBACaWqVQet46vIrBM1yAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 08:57:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 136\r\nlast-modified: Thu, 06 Jun 2019 06:42:07 GMT\r\netag: \"5cf8b5bf-88\"\r\nexpires: Mon, 31 Aug 2026 15:57:21 GMT\r\ncache-control: max-age=25200\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":136,"size_decoded":428,"mime_type":"image/png","magic":"PNG image data, 1 x 6, 4-bit colormap, non-interlaced","md5":"5a962adf74d92ae702467b3f47976547","sha1":"36f74049375584e3fa69b5ef87e9572336ff9e7a","sha256":"ad4ebea1c3496dd2924789ee009174a2c6289d1200e9811f458fd46f172d1d6f","sha512":"4ace23fe7ec6c7271710030fd423aace13eafac68ac3e76366ce4ce9bdc702caf71c9bdc2fb6a32c8e9791546098617cc0259decd8bb8489afdbce43e1b53a73","ssdeep":"","tlshash":"47c09bf3a615dc754a0d153b42e98271f429511e07046d0e5a13c216741e3448d56793","first_seen":"2023-04-15T10:50:30Z","last_seen":"2026-08-31T08:58:03.888326Z","times_seen":20401,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":0,"dns":0,"connect":206,"send":0,"wait":205,"receive":0,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.chaport.com/javascripts/audio-player.js","fqdn":"assets.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:22.872Z","timestamp":1788166642872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /javascripts/audio-player.js HTTP/1.1\r\nHost: assets.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:22 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jun 2026 09:49:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LZJX6XSzSI4IzY%2FSVDDFw%2Bmpinvx7ljhBIwgE%2BJHpR0LLh4nHBDe5auMHSUEwOwQc6eOzLy%2BBHCrL0KsgtD83eI1No%2FB9pNQ3so46%2BYx9hPjRAg9FW%2BbDNRhcsuE9FCOfHlREQ%3D%3D\"}]}\r\nage: 2782795\r\ncf-cache-status: HIT\r\netag: W/\"6a2a8491-6b07\"\r\ncontent-encoding: br\r\ncf-ray: a33ad3cdfe05b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27399,"size_decoded":9373,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27399), with no line terminators","md5":"65cbf911501a0de13afb9d1cb71933cb","sha1":"e9236ab09f15becfa6d86aeb5995fc896f1aab1b","sha256":"e92027b36a47b6e3c2e1c084ac31e8e7e6a4b904bbaa42d241ccf7f4e48d7a62","sha512":"a619c7409dd01aa33de6a1eb397188a42da076126f727c119ed69455158ccff9421daec4d8135dfee4e719b1d62aa70bc767f4430238da97714805c43655cc35","ssdeep":"384:Brt6nqLIf40nECIgPG8OrYleIoARnq0KaHvWvqTGDBnLbcfSLcg:MwXkPGdg7HnqhSTGlnLbcqwg","tlshash":"70c22c48b7e17d54435a34b3223f4a063bb51652545a3240f016c2e9bf78e8b91beeed","first_seen":"2025-09-01T08:05:49.861005Z","last_seen":"2026-08-31T10:48:20.566685Z","times_seen":1573,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/api/public/v1/accounts/6a7812f3dd4efc21a88d4cfc/init?id=0144b889-6e54-4457-af45-bfb76dea8a98\u0026token=9CahQgIHy6DR6bUPPmwlCCJBP09HUM8Da3bU0gT","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:22.904Z","timestamp":1788166642904,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /api/public/v1/accounts/6a7812f3dd4efc21a88d4cfc/init?id=0144b889-6e54-4457-af45-bfb76dea8a98\u0026token=9CahQgIHy6DR6bUPPmwlCCJBP09HUM8Da3bU0gT HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://openpowerdfs.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://openpowerdfs.com\r\naccess-control-allow-headers: Content-Type, cp-app-id\r\netag: W/\"43f-TNVFqXkBDOfRkaeeYRwqy28gbn0\"\r\nx-frame-options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubdomains;\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RVxfnvjX1NetJsHgntJiCCd%2BmKtAXmqL450q9p3UgQkYhHr4Z4o2kvXjtNTA%2F2fVse9NltvqFrFcj46JcjzU6%2FdDZgBteJcfOh7Lgefc50GiEtk1FpI1arI%2BsX2B4XgopA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a33ad3ce2eacb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1087,"size_decoded":1494,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1507e7e36a9b45f6f9d168f6cbef4f36","sha1":"4cd545a979010ce7d191a79e611c2acb6f206e7d","sha256":"66894a3cea7d3e956a035dee678636d636e7ea8fe6623c5860ccea3cebe6d055","sha512":"9f53548091fb9754b1fadc12b929562e98104a1650827838d46400348aafc175acfa7988d59651fd093e91524d9aa46b80b4239b3c8425f03ceaab3931b77950","ssdeep":"","tlshash":"c211429d71488d3b5fc01699a88fbb17534e6213d388443ea1e6ffb4025f5c4524b245","first_seen":"2026-08-31T07:53:51.163433Z","last_seen":"2026-08-31T08:58:03.898187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.chaport.com/uploads/operator-images/a2f0ef3d-fe8b-4924-a36f-ad25637ba4cb.png","fqdn":"app.chaport.com","domain":"chaport.com","tld":"com"},"ip":{"addr":"172.67.68.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://openpowerdfs.com/pc/","date":"2026-08-31T08:57:34.711Z","timestamp":1788166654711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"chaport.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 04:38:24 GMT","end":"Thu, 05 Nov 2026 05:38:08 GMT"},"fingerprint":{"sha1":"85:11:C6:89:C1:C7:D3:27:60:D6:5D:34:27:C1:0A:4A:31:2F:E9:88","sha256":"C0:EA:28:EA:00:98:7F:9D:D6:8D:3D:1E:AA:83:AC:6F:A4:4D:EB:B5:17:71:15:2E:29:85:7D:99:70:D4:A5:1E"}}},"request":{"raw":"GET /uploads/operator-images/a2f0ef3d-fe8b-4924-a36f-ad25637ba4cb.png HTTP/1.1\r\nHost: app.chaport.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://openpowerdfs.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 08:57:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 4671\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"1b9c48e34a7b31eb3aaf59fa20f17f52\"\r\nlast-modified: Sun, 09 Aug 2026 05:52:39 GMT\r\nx-wasabi-cm-reference-id: 1788166654 F8-R601-U45.prod3.ams 2307277734:22039132:99\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCfdON%2Fqe0sPta5lNID9Jcu7gzOPlwIc0uK0Sl55KH8g8ofv9AX9Cb4HPFmzTseKX9WwLtFE0YBBHVbvTb39dboDkqGc19Xa9eGQKwPmvxKcKdEk8%2FVkxvWdKGUZ1KZG9g%3D%3D\"}]}\r\ncf-ray: a33ad417ff16b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4671,"size_decoded":5518,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"1b9c48e34a7b31eb3aaf59fa20f17f52","sha1":"2e061a98172df82cf01d8ddd1521d6f75dee5141","sha256":"fd68a026307d182f3d0e6dc7dfdd84b3dabbe1c9570ce05729851f267db6ab21","sha512":"db933b577caae99d15102aac8f33a61845ed3ddfbddbbb1b9f27dac7e96b1e6a75a06961736b50b80a520b78054557b60af04f5c8cacf5cdce2fb96a99b58a34","ssdeep":"96:DXw8Puabk4hZNztzUpWdf9tW86HS2ZueZx55kemspGBE9RJSAVA:DXw82Cn/tOcz2PXTDpGWXJSAVA","tlshash":"f3a19ebe571314bae12f22207d0e88c8eadd14d256f43e5c95fde22d5273a0ab391dc2","first_seen":"2026-08-31T08:58:03.89907Z","last_seen":"2026-08-31T08:58:03.89907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}