{"report_id":"0bda74bd-7e13-49e5-94eb-0d993f486462","version":0,"status":"done","tags":[],"date":"2026-09-15T13:34:10Z","url":{"schema":"http","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"172.67.135.187","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"title":"opnbh.cc/","dom":{"size":8536,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1847)","md5":"1257c4e8cf055ac2c6c9535015546f57","sha1":"cdb687129240cb122ae3c717c03f574012e326d9","sha256":"f7c2bd60821846c2978f74048babdea7e9ce948dbe529cdcd4af24748b2e7a35","sha512":"5b1b7a2311466c63820e0c1116bd63d275a438fd6c807a1a96fa84502590919f9184ba2e8a8fe464e5b0388433a26d3f8d55dc87ea4298aa2137f7332efefa64","ssdeep":"96:cROb29iuREfxbunzcMIv0ZBcH/G/80jjp+bQzszG0+V25IRQe/QtvbSZyNRXFZu3:fFuXs2ERXmrETo","tlshash":"da0264ac38b84c5f09673f4199d79e5728d4b117d888fca0b88ed75513c2fa60678c79","dom_hash":"domhash2fc3e9fd806d0325a165617a08766d33","first_seen":"2026-09-15T13:34:16.089154Z","last_seen":"2026-09-15T13:34:16.089154Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"172.67.135.187","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T13:34:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"kf.dl237x.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-12-07","domain_rank":0,"first_seen":"2024-10-10T16:05:20Z","last_seen":"2026-09-15T13:31:48.27699Z","alert_count":0,"request_count":29,"received_data":660013,"sent_data":14688,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]}]},{"fqdn":"opnbh.cc","ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-30","domain_rank":0,"first_seen":"2026-09-15T13:31:47.660883Z","last_seen":"2026-09-15T13:31:47.660883Z","alert_count":15,"request_count":16,"received_data":2740452,"sent_data":7809,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"opnbh.cc/charting_library/charting_library.min.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T17:09:38.397132Z","times_seen":1753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/vendor-5b98bb0c.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74baffe3b770ddd58a0b632efc89e58b","sha1":"ba0ca5f0fe97b270131819082da9a38c9b9608ee","sha256":"f1148086395e4d31fc31e78312b4699d5383aa827397e66cef39e55dd8710713","sha512":"4c205632e97fc176d8cecb2ab1217ab3acdc613ee79bb0f1ee0972b2d2fbded0afe382c5d9e5a43d2552f1e0ba2463b5a853d12044c6e1229f6bd9d1fe7747dd","ssdeep":"24576:cC9zLUp9ySvifHxCAggjDoxoi+pNLb5c2BsiaZ6/QJ1F/V6+8M8ILHa2Z:cC9zAp9+kAZq8a/Z","tlshash":"22254bd47292f06247e720e640bb0002f2396a59744e8494f669dcdb7db9d8ce27bf39","size":993966,"data":"","first_seen":"2025-06-30T08:54:32.206447Z","last_seen":"2026-09-15T13:34:16.111274Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/en-54ab0bbc.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0f1841e7bb84a1272eb38cb817edb373","sha1":"cc8168a73e257c4bbc7a8e4fa398a66b87c514e4","sha256":"3c49e25e423398b8b6e3b1a7a841c4c3e0fc4b35cf27451f74207afcc07416f2","sha512":"94a1c97522d5f9f80bf3845842335799a79f2d88f5cdcb1591af788db211580c8a29711d0e38e6773eb4c02aa953d8622f8633d81927ef47bae52670e05ae613","ssdeep":"768:KGtZcEw/o7reOK9HiH/uA/HJ0AaA1hAIClesGACU0w1mwO6fpk7aOLx0e:uponeO5JJ0IhAKsGE0wqLx0e","tlshash":"c813f7897d1a889a04f36376b4ce6e5120f609c1c266881f4fedc9fd53e2b676363724","size":44864,"data":"","first_seen":"2026-09-04T16:33:35.31206Z","last_seen":"2026-09-15T13:34:16.103804Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-09-15T16:13:23.282356Z","times_seen":1965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T16:13:23.277559Z","times_seen":1672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dcd79ed7f4bc026b4db96e1ae9b8fb97","sha1":"598a212ecf4898b9b2892412e9e83a400d5a008b","sha256":"cbb9e541e67567a3dc61831e08ec402a53984cff58a096f1a48597da3df62c77","sha512":"24a9faf9ea6f0ccd4e9af46a3ca424ff87b2b37001b079c8c4e0b0081d9a844d4e6bfc81c73a2243776d58f8bb1304f4d572975c70a3139c4d2125e5da54c9a7","ssdeep":"","tlshash":"95d0a7d5b1861e605745575524ef15e4a138842a76444716cd9c990c2a520f88333f98","size":224,"data":"","first_seen":"2025-04-13T20:28:04.831233Z","last_seen":"2026-09-15T13:34:16.116488Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e702dba19f152639bce0af8242f5f4f5","sha1":"099fe8d4a97f78695a084f95e181c2fe2cd439a2","sha256":"74fa94d7f448c86227db000550face381d2f5c2fdfc621b173b15dfd49300d85","sha512":"1b66662dbead90fceff1f2e9dab6f4f7d4916701a764134a62ac45bfd4aa22db28e175d75a830be590127f6d2315f37e1105b1e7d4af04aaf290a32ddc6d6b36","ssdeep":"96:NOb29iuREfxbunzcMIv0ZBcH/G/80jjp+bQzszG0+V25IRQe/QtvbSZyNRXFZuJG:oFuXs2ERXmG","tlshash":"54b1f0ee89780dae05967d40894f6ba724a87427fcdcfaa4bd4ccf0063c96561374da8","size":5308,"data":"","first_seen":"2026-09-15T13:34:16.117036Z","last_seen":"2026-09-15T13:34:16.117036Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/vue-dompurify-html-DZ5r8uTJ.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7849386dadf3fe439724fd5120b7ab17","sha1":"d87b510232908a6e650c469384e3cc9fd214b1cf","sha256":"4c35d0ba8a0168b8ae001dd260271b7c081e469e3efef57b690c6487467f2ea7","sha512":"5d0a15ce5c4b5156e3a3c36541a398c717b3d442cc4d9927de0eabe8c01b7c9c19a2bd17263a2dfcd5ecd510aa40ff5494cecb4acead1b4e0efa45d64471d03f","ssdeep":"384:J3A9/XdIbJJBSv8BlM8uPkrQ7/ixAZlqoW+kOZliw79n85aFO9Qw91eBjVP/lHz1:mxNI3Ev8jM8ukrQ7/ixAZlqoW+kOaw7D","tlshash":"baa23da9bd857d765fef01e860bb590c91bc114a340cc4a0e6cdddb518bba89502bf2f","size":21842,"data":"","first_seen":"2024-10-25T14:46:11.938471Z","last_seen":"2026-09-15T13:37:28.014928Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a12beb8c3bea6886db7346b336af5549","sha1":"d816d03c631617eb32b27baac48feb2c2495ced9","sha256":"a4d1b2dbfcfa038ac5b5e980ea2f3fdc31948863bfca2849320183410f831fc4","sha512":"0ac7131f62c6f4834a04a8f1824d28bbc3f95975bdf2d1b90b026db770f6320d735e910aced8d25ce7ce198de07b5af06c957855d3b8f62ccba1cca16810658b","ssdeep":"","tlshash":"d6c08cc4a0c22d001642691014af28e4d024a026b0485b168c98dc892e630b09237ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.827015Z","last_seen":"2026-09-15T13:34:16.118586Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/_plugin-vue_export-helper-CvYNw_mv.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ea0cbf3eb34a3e3da03b73f219b4b7","sha1":"4c0d6bfcc5a1b243ef265bdca07565d490541d05","sha256":"28d06f248900cc6067734060adb6a2ce2ee4632bad312870ffcb3e0e5a89f9b8","sha512":"7c596c2a54b75ca3878a9a61683374cd232df10941463565f066b2c78ce8ce27bd539a56bbdea87f282e84280b3e07cf5c0ed26861edc11af4f021a6c594e902","ssdeep":"1536:xeedwDLCdVGOvkrP3pHNXtxkaS3hcEg8u9R6KnMHa43E2SVsYPBoS/zBIlJJEhkq:LwqCOvAxSNSt6KnGp3Etx5oS/qlJyhkq","tlshash":"dbf318e53181717253e908e240bb1006b2292829784d84ecb57deddf3a7695a50fffbe","size":172615,"data":"","first_seen":"2024-12-12T23:56:34.12901Z","last_seen":"2026-09-15T13:37:28.068804Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/sharedFrameEvents-CcDS0bVP.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7859f845c361ee4215b92e8060216842","sha1":"b412247e6e03b6589dee04ab60f5f7c27502bc7f","sha256":"c330e9f59d422bf0382fed8b1243a4795fcc52a7dac65c53e8a388c143ff2d37","sha512":"d628059dfe3ebb5ad971c93e3c5cd76d05445a1c2c97a61bb4937ca3313dedc27e0f761cb2b66bf6bc444e61974be6c34fdd7fd03e226c8eafafb594761513db","ssdeep":"","tlshash":"b211e2cdeca6d5f385f348cb52706a211234108572a949d07879c82d172ae8f459be08","size":1024,"data":"","first_seen":"2024-10-25T14:46:11.810756Z","last_seen":"2026-09-15T13:37:27.996899Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/constants-lVAyZKq6.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","size":157,"data":"","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-09-15T14:35:04.756019Z","times_seen":2123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/axios-CCb-kr4I.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afeb60b8a66fc30300f765a41ad308d9","sha1":"c700f9ed30b20f76c9032dc0b836d72c67daef19","sha256":"f12c0627b59efeaef17890331a904185cd475e13fe29d42c9ce5123b6effa59a","sha512":"56af66ecc801536c6d89730e87f50be464cd1f7a3813f288fc2b207179013e54a47d89177ccc80e96ac12d1237f0e49ddbbe9706cbf545f4d38183d2b98b19f5","ssdeep":"768:xtiVOdLK9yCE9UpPt4xuQ8zqXuB5dfJyVycZsy7w8Qqvrdobe0AVYqVE6GGbv5mX:xsYmpD/SLK4c+kAq","tlshash":"63f208d5b6d2b07243ea61f4406b0902f3399915748e84a4f16c9cdb3cb614a97bbfbc","size":35017,"data":"","first_seen":"2024-10-25T14:46:12.073212Z","last_seen":"2026-09-15T13:37:28.046556Z","times_seen":257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/index-d4b99f8c.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aea1e9c53d4ccde63f5c2495a4ccb68f","sha1":"f51f6f34bf6c38221913c313b17d1f5603e92d42","sha256":"d7ec2627d5dd9bf59b805b3994068efad6ff5d0bb0e0eff81e942061ee68e876","sha512":"e162a1694aa8eee78afe9f4090090013c9c14b26d8ed890dfca8e6fe7f2d6a29d4d41a3c5551f0dbcd0c0c8eee87f5b13610a8c9645bb533afde0864b6d5174f","ssdeep":"1536:EJFJhNtHFC1DwOohnFeiePk1kwE9ou9jgKkKrYT:EXJbt8ivcPk1mJ9rYT","tlshash":"66c33b89e50b5fff5cf90c58a999100020981fd7a848cce3f7f96e1627badc4535ab19","size":127043,"data":"","first_seen":"2026-09-15T13:31:55.397657Z","last_seen":"2026-09-15T13:34:16.100743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3b8169908f63877e8e60a39198f276ad","sha1":"c168a52fac932c30ce26c29354094eb425561757","sha256":"e4ef5cf4ec0d569c9f0e48a159f32fb1b0db370020139adba6a80ea708200830","sha512":"0ccb1f75e1f25c2fed565176bbd9e0f2a216bd3b2e2df3f161a3aca8ba607ad435353e94382ba33db3d13c24f42c57a87299e3e45c68e6a3ed88adbe83d10cea","ssdeep":"","tlshash":"47c08cc9a1c22e006602651155bf35f4a024402a71481b178ee4d8982f230f88233ed8","size":156,"data":"","first_seen":"2025-04-13T20:28:04.833363Z","last_seen":"2026-09-15T13:34:16.119104Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/packs/js/sdk.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f77d2cbbbd7542ce7bfc84f21c4fc25e","sha1":"7c4abd866399c53c13b9b7c752d57e836540d0e1","sha256":"e03b3e1555b0e19bb14a3f7563504d8f4bb1580346749132e2d7a0f2447cbd4f","sha512":"bdba42f3b42ce2d4eeb3d0b97fd73a7d08c315c22b588cab81065e910f73c2b659f0b26ebfbca9495dcba10196f2d106b9e5a225a98d56c0d2613cd89fb00a2a","ssdeep":"768:6464XK0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJuT1GqFxMzWPsUQ:vRK0h0i0z0t0Z09af7evYvMBG0iKTpQa","tlshash":"5dc2fad16291797407654ecb27a7b718b33850b5f14acce0e5c8e86d2ac8dcb5033eb9","size":27823,"data":"","first_seen":"2024-10-25T14:46:11.953956Z","last_seen":"2026-09-15T13:38:37.875172Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9774e014bcee6778f7ad0ec93d304ec5","sha1":"19b7efe819ede9d028958baf0ba5feb3c5a1c844","sha256":"9d74fdf3be6b15aebd1601de5fa9b1790368683b38cc02a9debc9c84114116dc","sha512":"31146355cfd37c79efcd5072c469971bedd4fbcde2f86d2d322c833c0ee1c20e060acf991defad04568942bd2d35c1634a533faaf3df7dc384419faef6b0841f","ssdeep":"","tlshash":"8011abfe191a60296303404e976b7811643690a9400a184173ccde9dbb9ab7dd0cbb8c","size":1034,"data":"","first_seen":"2026-09-15T13:31:55.404613Z","last_seen":"2026-09-15T13:34:16.11964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-15T17:02:47.766954Z","times_seen":43009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-15T17:02:47.767502Z","times_seen":44342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-09-15T16:13:23.284099Z","times_seen":4809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/#/no-wallet","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"51e586f9b3825943ee5e3bb9ca606ad3","sha1":"ca2bf67804939fb4d9bc9afb5f7470e36e0037f4","sha256":"63aa8568c2b31ae59842bdf28b74c1b266b81d186c72ee64d0ec371f48d458de","sha512":"ddd3f2c11759fdf632e9c6b4021c8755cee3bddff9efb9071dfef3f844bde35ef421169ce982ff1c69f7402dc70f428d776bba513a73136631b0a8b09e44c12f","ssdeep":"","tlshash":"a7c08cc6a0d22d001616641014af24e89024402670485f128c94d84c2e220f09233ea8","size":142,"data":"","first_seen":"2025-04-13T20:28:04.830126Z","last_seen":"2026-09-15T13:34:16.122194Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/widget-xCRxRgK4.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e87052dd6a26181cacf77b1f8b706415","sha1":"8f41b60af322c60061536e9d77532118a6b78017","sha256":"8529f8afafb3583f4ef247b2c875a2b2b68b5e0d70bd4f0acfae1e6bb73811e2","sha512":"4bcfe256407272856089dd03e884da5026d9a3519b8f5434573c89926fcad7758772da8f4770f4caf81919046821c36d4d7f7c49f9aa9eee4b9db34eb3e645fe","ssdeep":"1536:zr6gDjV9WVWxK+SKRka0hnkSPFIxFmnS6nqZL2:KsSdhndFu4nMp2","tlshash":"1e934cd1b0d3957607a398a4901e2204f33adf69a8c9f844fb9cddd2798948d507bfb8","size":90336,"data":"","first_seen":"2024-12-12T23:56:34.200487Z","last_seen":"2026-09-15T13:38:37.864373Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/globalConfig-19eOCNsS.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3e5d969290989d54f2f66852656848d","sha1":"964d51095d7593ab33bdcd2d97767fe0ebf6e18a","sha256":"459b288803a99cccac620d27a9c320d00b8225a35f298ed491cb8bc51af51ff9","sha512":"09bd56f1b0f65c884a81be6ac288b2e2b5ec97da95ad06235658832493ec06b3cd61d29d257839c698b56a69b20d0db88c6bb1756cc40b95c1b404698d70f528","ssdeep":"1536:k0jOazpZgni8HkSHcUBAnOQndHzdgfn9swvOLYu:bOAXgni8HkSHjBAnO0dK98LH","tlshash":"0b83f7c971e67026877666e970bb000abb3d2a58344d9854f0ade5ca3e32c5d43f7f68","size":81348,"data":"","first_seen":"2024-12-12T23:56:34.227199Z","last_seen":"2026-09-15T13:37:27.971772Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/globalConfigMixin-DWl0nQg7.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.412Z","timestamp":1789479217412,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/globalConfigMixin-DWl0nQg7.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/index-2b4a6668.css","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:29.582Z","timestamp":1789479209582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /assets/index-2b4a6668.css HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5REfe0An04fy%2FRSS0A2jIoJAAVWs%2BhqBGBbD1u2A8QP0NX%2F78K7U3MMdzQv1foA2rr5%2FdqhuFtRvZSZNaPwJXFlN9JD6W67FuzdGdEDCbcfAnezR4lqLzd6Og%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa833b0-4c884\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800e3ef971a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313476,"size_decoded":77143,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"7acf59bad1e420dae7c2d80b76b7ea31","sha1":"6e3bca7cabac01cdb86a515cfe972859d9d0e8e9","sha256":"2b4a66689296af4ca2f0ffef925200ed044d3f3cd750e3b77ea764b020813522","sha512":"d5fbdec92c6c915c010b51c962b1a1b7ed430d732dfd48cc0f8f260d71b654e6735ac5512ab7c9d1c396d9b0ff8b0ff694e599d674c929638aa2abe996f549de","ssdeep":"6144:n+B/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05TN:+B/54NZ8w71ZACkFDS3vyf58rBeV05TN","tlshash":"1164d7a9a590117c6f27aa759bce5ad8f23ce6719c118de8f20150094fc3ffa2363617","first_seen":"2026-09-15T13:31:55.370915Z","last_seen":"2026-09-15T13:34:16.092987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":538,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/api/common/getAllSetting","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.408Z","timestamp":1789479211408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nlang: en-US\r\nOrigin: https://opnbh.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:32 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://opnbh.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzG2fuKeTZfLwUjbwLN%2FX%2FwvUUJeY7RQ33vZVLdhu292ufskUeDc0Agf3SF%2FMHZoRSqOAPKYu%2BbhMiy5egFxUjEoQNbT9osb5yQPInY%2Bqd5ByPvDi9yEFI4FJg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800ef49591a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21058,"size_decoded":6550,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (20570), with no line terminators","md5":"3614f1bcae89b16544f81612b2e326d0","sha1":"91938a1f4a7dea29852a8cf8a3f07359170efd00","sha256":"bac5623cbe6e9c1245fcd48353e787b49a21c7f9fe357878f815048abe8fc719","sha512":"f72f6acb08c8cb225cd9dad6b929f5d24483394c2109fe547f4501c7abc69acbfed9bf59e0854a15f1e1c8a6ff4a18691580d5d5dee2323f850cb13e70866179","ssdeep":"384:UXqABD8kcRYK56d9d9WI9xS9X9PL0AMD/fsHPA9K9c9K9A909z9P:UnSCELeDiJ","tlshash":"7a92520d3a8cdc7967c657e910977bd17bac34a3e498ec4cd2aeaf1c8499af9040f416","first_seen":"2026-09-15T13:34:16.093798Z","last_seen":"2026-09-15T13:34:16.093798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":888,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":626,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/api/common/getCoinList","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.411Z","timestamp":1789479211411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nlang: en-US\r\nOrigin: https://opnbh.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:31 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://opnbh.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VptF4rI3Nd%2BOrqUAg2HOGrVWNXmnDlywtzVK%2BGaydhcuy4TstudLvh6nk%2F5rgcldkdhxxvlhxcy7Kfd0ZuvS6rSNVRQuRpDr7yNsOWt3nsOpV175KpzOZwuaqw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800ef595b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25830,"size_decoded":4410,"mime_type":"application/json","magic":"JSON text data","md5":"53d0f26d6cf12d72ee228483cc6f45d8","sha1":"3d1f4a3bcc250bcf9e64c06a16138cf6e3563335","sha256":"30088de8a51e9cfcea0a3707fe9af9f647f7f5c9d8d9141848e8959d8c63874d","sha512":"710708ab22e08d4d92c8fc7907932dbae217b42c5bd8f6c610e8498c784486194a55a43018901dc4f8481154c72f27ff29df179003b39bb241edd458c31e6b67","ssdeep":"192:n40TZ+unt1Rwop0itit5iMt3tC3PgQgAndKdLWB7Z7eUIUlhahqc6zKVKmWxqxLQ:PARI","tlshash":"60c2114a5a18d469da75c2e12e6b7b62e189347fb8c88a4ed2df4c54cdc8fb8450ff01","first_seen":"2026-09-15T13:31:55.390574Z","last_seen":"2026-09-15T13:34:16.095036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/_plugin-vue_export-helper-CvYNw_mv.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.370Z","timestamp":1789479217370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/_plugin-vue_export-helper-CvYNw_mv.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":172615,"size_decoded":72243,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (28324)","md5":"b2ea0cbf3eb34a3e3da03b73f219b4b7","sha1":"4c0d6bfcc5a1b243ef265bdca07565d490541d05","sha256":"28d06f248900cc6067734060adb6a2ce2ee4632bad312870ffcb3e0e5a89f9b8","sha512":"7c596c2a54b75ca3878a9a61683374cd232df10941463565f066b2c78ce8ce27bd539a56bbdea87f282e84280b3e07cf5c0ed26861edc11af4f021a6c594e902","ssdeep":"1536:xeedwDLCdVGOvkrP3pHNXtxkaS3hcEg8u9R6KnMHa43E2SVsYPBoS/zBIlJJEhkq:LwqCOvAxSNSt6KnGp3Etx5oS/qlJyhkq","tlshash":"dbf318e53181717253e908e240bb1006b2292829784d84ecb57deddf3a7695a50fffbe","first_seen":"2024-12-12T23:56:34.12901Z","last_seen":"2026-09-15T13:37:28.068804Z","times_seen":50,"resource_available":true,"data":null}},"time_used":9771,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9771,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Index-CtF_0wrY.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.398Z","timestamp":1789479217398,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/Index-CtF_0wrY.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://opnbh.cc/ws/12adbd10-de82-4cfc-af45-3ec0d2bd44a1","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.403Z","timestamp":1789479211403,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /ws/12adbd10-de82-4cfc-af45-3ec0d2bd44a1 HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://opnbh.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +6fLNWH1D7DKEzNiwYNjxw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 15 Sep 2026 13:33:32 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nX-XSS-Protection: 1; mode=block\r\nOrigin: https://opnbh.cc\r\nUpgrade: WebSocket\r\nX-Frame-Options: SAMEORIGIN\r\nSec-WebSocket-Accept: nf4X1u9zZ/oZhLklLR+iRDCQ0X8=\r\nAccess-Control-Allow-Origin: https://opnbh.cc\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nSec-WebSocket-Location: ws://opnbh.cc/ws/12adbd10-de82-4cfc-af45-3ec0d2bd44a1\r\nAccess-Control-Allow-Credentials: true\r\nX-Content-Type-Options: nosniff\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uub4Gcg8LxhUyv9HpM%2Fx0Lpsm265JpsCaBwBOIYAjmUDa11mb4XqioJXjfLYdIH6JqsYf4uLx7NtNu4pGFpXeAMxF5PLa7l8%2BkaQprPohmrXu6ywCNOD%2BecBkg%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a3b800f00eea18b1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":953,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":751,"timings":{"blocked":0,"dns":74,"connect":90,"send":0,"wait":564,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Spinner-BEUeMke2.css","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.365Z","timestamp":1789479217365,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/Spinner-BEUeMke2.css HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1081,"size_decoded":764,"mime_type":"text/css","magic":"ASCII text, with very long lines (1080)","md5":"2db0fe12141388a1f68db6f5e58a88d1","sha1":"e579b2dc4babf95782fe28daaf81ccc3cfbee6d3","sha256":"404b1e86e35cc642cf87ff9f66eb0ac020fd85f44589c8d109a1f8c8bb2e4d4f","sha512":"73869967d023890dc828bfe02ff449d72e98932e719d2fff68c53824ff452495335dfc35208ddb96173624461b25e0f6643e357df9e54c162f062bb125a91b9c","ssdeep":"","tlshash":"9411293d6e4e14b5e133d2a293b48acd6f3bb6c5b221864de233d916895a74c3835a1c","first_seen":"2024-12-12T02:35:41.935978Z","last_seen":"2026-09-15T13:38:37.949647Z","times_seen":221,"resource_available":false,"data":null}},"time_used":5991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5991,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/globalConfig-19eOCNsS.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.372Z","timestamp":1789479217372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/globalConfig-19eOCNsS.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81348,"size_decoded":29777,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26145)","md5":"a3e5d969290989d54f2f66852656848d","sha1":"964d51095d7593ab33bdcd2d97767fe0ebf6e18a","sha256":"459b288803a99cccac620d27a9c320d00b8225a35f298ed491cb8bc51af51ff9","sha512":"09bd56f1b0f65c884a81be6ac288b2e2b5ec97da95ad06235658832493ec06b3cd61d29d257839c698b56a69b20d0db88c6bb1756cc40b95c1b404698d70f528","ssdeep":"1536:k0jOazpZgni8HkSHcUBAnOQndHzdgfn9swvOLYu:bOAXgni8HkSHjBAnO0dK98LH","tlshash":"0b83f7c971e67026877666e970bb000abb3d2a58344d9854f0ade5ca3e32c5d43f7f68","first_seen":"2024-12-12T23:56:34.227199Z","last_seen":"2026-09-15T13:37:27.971772Z","times_seen":49,"resource_available":true,"data":null}},"time_used":12943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/constants-lVAyZKq6.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.380Z","timestamp":1789479217380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/constants-lVAyZKq6.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 157\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157,"size_decoded":463,"mime_type":"application/javascript","magic":"ASCII text","md5":"c23eb02c59275cf91b59cfd6bbcc315a","sha1":"6d75b11d40836ca533dd3c2230ebd9cc7e927c9c","sha256":"af3915fac7511beefcbb8960c26748c2ddf6a7e0f588e71261cf175455b3fb97","sha512":"94b2ab23459feb51256816f600cb4129bebf70026b8774057e059187650f92bcde7815f5d71b0be51ed10ee3bfc4663d8a9bd8c8485a7c5b3e6acb8b031bb6d5","ssdeep":"","tlshash":"f0c02b0b6db45e7556301b3fc3a2500b2e0ca08df1afdda8fc08d0e186a25c36638d24","first_seen":"2024-10-25T14:46:11.754013Z","last_seen":"2026-09-15T14:35:04.756019Z","times_seen":2123,"resource_available":true,"data":null}},"time_used":24594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12935,"receive":11659,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/mutationHelpers-3VTcoJiD.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.382Z","timestamp":1789479217382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/mutationHelpers-3VTcoJiD.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/businessHour-Bce9Ggti.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.392Z","timestamp":1789479217392,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/businessHour-Bce9Ggti.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/index-d4b99f8c.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:29.572Z","timestamp":1789479209572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /assets/index-d4b99f8c.js HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rq7%2Br46HO7%2B6ouow4D227oMNj4rjXsmXGCF%2FcWGmD%2FPuAvRhmp6P6pG1aVsS7VBPB7Qa425bBhMZJ4ebJQtbgZfcYKJBZjN6d4ra1cq0U%2BF%2FfHx7S9gTcFTtxA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa833b0-1f043\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800e3df921a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127043,"size_decoded":38453,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65526), with no line terminators","md5":"aea1e9c53d4ccde63f5c2495a4ccb68f","sha1":"f51f6f34bf6c38221913c313b17d1f5603e92d42","sha256":"d7ec2627d5dd9bf59b805b3994068efad6ff5d0bb0e0eff81e942061ee68e876","sha512":"e162a1694aa8eee78afe9f4090090013c9c14b26d8ed890dfca8e6fe7f2d6a29d4d41a3c5551f0dbcd0c0c8eee87f5b13610a8c9645bb533afde0864b6d5174f","ssdeep":"1536:EJFJhNtHFC1DwOohnFeiePk1kwE9ou9jgKkKrYT:EXJbt8ivcPk1mJ9rYT","tlshash":"66c33b89e50b5fff5cf90c58a999100020981fd7a848cce3f7f96e1627badc4535ab19","first_seen":"2026-09-15T13:31:55.397657Z","last_seen":"2026-09-15T13:34:16.100743Z","times_seen":2,"resource_available":true,"data":null}},"time_used":878,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/platform/dev/favicon.ico?2.0.1789408176792","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.819Z","timestamp":1789479211819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /platform/dev/favicon.ico?2.0.1789408176792 HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:32 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrBxKKOx2N6eEYnP2ucmmBrASl88yBo9LsiymOYjVvDfpMquUSAo0%2B6HKb7qJg1Z5CIxYy2xYxa3WAraRxmwU%2BVDukbsr%2F5w5kYZdRmnSsge9%2Fiq1%2BZtCqmRaw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800f1d9d91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":707,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-15T15:05:07.194718Z","times_seen":39449,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":558,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/vue-dompurify-html-DZ5r8uTJ.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.374Z","timestamp":1789479217374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/vue-dompurify-html-DZ5r8uTJ.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":21842,"size_decoded":9566,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20785)","md5":"7849386dadf3fe439724fd5120b7ab17","sha1":"d87b510232908a6e650c469384e3cc9fd214b1cf","sha256":"4c35d0ba8a0168b8ae001dd260271b7c081e469e3efef57b690c6487467f2ea7","sha512":"5d0a15ce5c4b5156e3a3c36541a398c717b3d442cc4d9927de0eabe8c01b7c9c19a2bd17263a2dfcd5ecd510aa40ff5494cecb4acead1b4e0efa45d64471d03f","ssdeep":"384:J3A9/XdIbJJBSv8BlM8uPkrQ7/ixAZlqoW+kOZliw79n85aFO9Qw91eBjVP/lHz1:mxNI3Ev8jM8ukrQ7/ixAZlqoW+kOaw7D","tlshash":"baa23da9bd857d765fef01e860bb590c91bc114a340cc4a0e6cdddb518bba89502bf2f","first_seen":"2024-10-25T14:46:11.938471Z","last_seen":"2026-09-15T13:37:28.014928Z","times_seen":138,"resource_available":true,"data":null}},"time_used":12941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/sharedFrameEvents-CcDS0bVP.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.376Z","timestamp":1789479217376,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/sharedFrameEvents-CcDS0bVP.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1024,"size_decoded":936,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (968)","md5":"7859f845c361ee4215b92e8060216842","sha1":"b412247e6e03b6589dee04ab60f5f7c27502bc7f","sha256":"c330e9f59d422bf0382fed8b1243a4795fcc52a7dac65c53e8a388c143ff2d37","sha512":"d628059dfe3ebb5ad971c93e3c5cd76d05445a1c2c97a61bb4937ca3313dedc27e0f761cb2b66bf6bc444e61974be6c34fdd7fd03e226c8eafafb594761513db","ssdeep":"","tlshash":"b211e2cdeca6d5f385f348cb52706a211234108572a949d07879c82d172ae8f459be08","first_seen":"2024-10-25T14:46:11.810756Z","last_seen":"2026-09-15T13:37:27.996899Z","times_seen":92,"resource_available":true,"data":null}},"time_used":12939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/DateHelper-D7GM2F2-.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.386Z","timestamp":1789479217386,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/DateHelper-D7GM2F2-.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Branding-MjEsbKGX.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.396Z","timestamp":1789479217396,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/Branding-MjEsbKGX.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/index-BP-sUqpX.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.402Z","timestamp":1789479217402,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/index-BP-sUqpX.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/_commonjsHelpers-BosuxZz1.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.406Z","timestamp":1789479217406,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/_commonjsHelpers-BosuxZz1.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/resource/fonts/Arial.ttf","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:30.750Z","timestamp":1789479210750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnbh.cc/assets/index-2b4a6668.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:31 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Oct 2025 05:17:55 GMT\r\npriority: u=3,i=?0\r\netag: \"68df5c83-ff9e4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckM4Z43Vj%2BZV4gk78tMroaAB9O3N6%2Bz4zl5JV8udijVdYguprqK3YXS%2BWKhelIIRcaUHevMJ8N5oRf%2BFLSu2rtQne4wPZMrLjZAnMmX9WSRcnsOcaPN3bDPmIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800eb38c21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047718,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-15T17:10:39.995629Z","times_seen":2686,"resource_available":false,"data":null}},"time_used":2188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":588,"receive":1600,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/platform/dev/logo_144.png?2.0.1789408176792","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.817Z","timestamp":1789479211817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /platform/dev/logo_144.png?2.0.1789408176792 HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:32 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oOvQ2aX5mz3VbEZtZwqEtCE%2F9rvSj5L%2BV4tVdjv9lA3%2BFHSDQxF%2FzFLD9n1mV4Bx0pWsdQPYJd3G%2Fq0Pbd8SLTbAvqUBiSJb1P2TrkTqvOAaamycV1caEOA6A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800f1d9d81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":707,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-15T15:05:07.194718Z","times_seen":39449,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/en-54ab0bbc.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:32.310Z","timestamp":1789479212310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /assets/en-54ab0bbc.js HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/assets/index-d4b99f8c.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UespAOycRuM5%2Bk7NLEW4iH1VBzZfdwEzthx0rMsvaLS2KutE8sG7Zsp7T0X62%2FHNmHbTpJSnNUFAhNM75gJ1JOPCC16FRC8DldoWvBj5fEk2F6m3K07VaW1%2B3Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa833b0-af42\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800f4fa571a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44866,"size_decoded":16470,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44829)","md5":"0f1841e7bb84a1272eb38cb817edb373","sha1":"cc8168a73e257c4bbc7a8e4fa398a66b87c514e4","sha256":"3c49e25e423398b8b6e3b1a7a841c4c3e0fc4b35cf27451f74207afcc07416f2","sha512":"94a1c97522d5f9f80bf3845842335799a79f2d88f5cdcb1591af788db211580c8a29711d0e38e6773eb4c02aa953d8622f8633d81927ef47bae52670e05ae613","ssdeep":"768:KGtZcEw/o7reOK9HiH/uA/HJ0AaA1hAIClesGACU0w1mwO6fpk7aOLx0e:uponeO5JJ0IhAKsGE0wqLx0e","tlshash":"c813f7897d1a889a04f36376b4ce6e5120f609c1c266881f4fedc9fd53e2b676363724","first_seen":"2026-09-04T16:33:35.31206Z","last_seen":"2026-09-15T13:34:16.103804Z","times_seen":3,"resource_available":true,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":551,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/packs/js/sdk.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:33.367Z","timestamp":1789479213367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /packs/js/sdk.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 18 Oct 2024 11:17:36 GMT\r\nvary: Accept-Encoding, Origin\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27823,"size_decoded":10402,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14155)","md5":"f77d2cbbbd7542ce7bfc84f21c4fc25e","sha1":"7c4abd866399c53c13b9b7c752d57e836540d0e1","sha256":"e03b3e1555b0e19bb14a3f7563504d8f4bb1580346749132e2d7a0f2447cbd4f","sha512":"bdba42f3b42ce2d4eeb3d0b97fd73a7d08c315c22b588cab81065e910f73c2b659f0b26ebfbca9495dcba10196f2d106b9e5a225a98d56c0d2613cd89fb00a2a","ssdeep":"768:6464XK0h0i04Y0t0Z09af7evYvMBG0iKTpQRtAtjF060EfufYJuT1GqFxMzWPsUQ:vRK0h0i0z0t0Z09af7evYvMBG0iKTpQa","tlshash":"5dc2fad16291797407654ecb27a7b718b33850b5f14acce0e5c8e86d2ac8dcb5033eb9","first_seen":"2024-10-25T14:46:11.953956Z","last_seen":"2026-09-15T13:38:37.875172Z","times_seen":135,"resource_available":true,"data":null}},"time_used":2405,"timings":{"blocked":-1,"dns":8,"connect":212,"send":0,"wait":1228,"receive":0,"ssl":957},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Spinner-B-aSVz3z.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.391Z","timestamp":1789479217391,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/Spinner-B-aSVz3z.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Validators-eX6_8wdj.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.401Z","timestamp":1789479217401,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/Validators-eX6_8wdj.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Icon-Dtj3LCzD.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.413Z","timestamp":1789479217413,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/Icon-Dtj3LCzD.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:36.028Z","timestamp":1789479216028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nlink: \u003c/vite/assets/widget-xCRxRgK4.js\u003e; rel=modulepreload; as=script; crossorigin=anonymous; nopush,\u003c/vite/assets/widget-CvWjbzuH.css\u003e; rel=preload; as=style; nopush,\u003c/vite/assets/Spinner-BEUeMke2.css\u003e; rel=preload; as=style; nopush,\u003c/vite/assets/Branding-snHbT51t.css\u003e; rel=preload; as=style; nopush\r\netag: W/\"d5564edcabddbaa64c0b253c1af17af2\"\r\nset-cookie: _chatwoot_session=i7W5io6YFJrcrUarPzq2jepeWQgNxChHzJMqjSNZeR665kecefLE1%2B2JBuX4GHu4XYUINM5509RAoSAIPQqyHrleSFOlXf2%2BEkwcUqA2nd7C6ibW99fxgE5Wq1Ur49mkLoCJilAT%2BZKT8lQ5MgN7S0ugO6u3uTEgHoomyi1iDpBI3FmxJkEDe%2F0%2BLZukZjEl9KmQgbYDrQwZRk4RrVpfcOIAXl7vXdZ2%2Bry0RvLCR3AxxodxCK%2FsROkQS%2FwrfWNZhHfPaYUbNVMJjgBv8JxGeZU%2BztdrZobf1A%3D%3D--x4LidAzymOuEB5P6--1CKGMyk4oWCMjh6Hb1hHng%3D%3D; path=/; HttpOnly; SameSite=Lax\r\nx-request-id: b799808f-f956-492b-8f92-e33caee6e094\r\nx-runtime: 0.033931\r\nx-cache: MISS\r\ncache-control: max-age=0, private, must-revalidate, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"_chatwoot_session","value":"i7W5io6YFJrcrUarPzq2jepeWQgNxChHzJMqjSNZeR665kecefLE1%2B2JBuX4GHu4XYUINM5509RAoSAIPQqyHrleSFOlXf2%2BEkwcUqA2nd7C6ibW99fxgE5Wq1Ur49mkLoCJilAT%2BZKT8lQ5MgN7S0ugO6u3uTEgHoomyi1iDpBI3FmxJkEDe%2F0%2BLZukZjEl9KmQgbYDrQwZRk4RrVpfcOIAXl7vXdZ2%2Bry0RvLCR3AxxodxCK%2FsROkQS%2FwrfWNZhHfPaYUbNVMJjgBv8JxGeZU%2BztdrZobf1A%3D%3D--x4LidAzymOuEB5P6--1CKGMyk4oWCMjh6Hb1hHng%3D%3D","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"_chatwoot_session=i7W5io6YFJrcrUarPzq2jepeWQgNxChHzJMqjSNZeR665kecefLE1%2B2JBuX4GHu4XYUINM5509RAoSAIPQqyHrleSFOlXf2%2BEkwcUqA2nd7C6ibW99fxgE5Wq1Ur49mkLoCJilAT%2BZKT8lQ5MgN7S0ugO6u3uTEgHoomyi1iDpBI3FmxJkEDe%2F0%2BLZukZjEl9KmQgbYDrQwZRk4RrVpfcOIAXl7vXdZ2%2Bry0RvLCR3AxxodxCK%2FsROkQS%2FwrfWNZhHfPaYUbNVMJjgBv8JxGeZU%2BztdrZobf1A%3D%3D--x4LidAzymOuEB5P6--1CKGMyk4oWCMjh6Hb1hHng%3D%3D; path=/; HttpOnly; SameSite=Lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ruby","description":"Ruby is an open-source object-oriented programming language.","website":"https://ruby-lang.org","common_platform_enumeration":"cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*","icon":"Ruby.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ruby on Rails","description":"Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.","website":"https://rubyonrails.org","common_platform_enumeration":"cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*","icon":"Ruby on Rails.svg","categories":["Web frameworks"]}],"data":{"size":8567,"size_decoded":4059,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1847)","md5":"bb8d25409523611e1f5e16be9fb4a3f5","sha1":"946de9ee37a30e9e37685b48a0fef5783656c631","sha256":"d5564edcabddbaa64c0b253c1af17af27440a5f0c59dce92ab85b33fd8357fe4","sha512":"2df6b38528071b6f2a1181ee8b9a8919e7c48c7755bd8d2be4368a27bb9389f0fad8247e6175991ca23d9a6e5e1a200b95d22525ebddd740bb1d6c5765242411","ssdeep":"96:CUOb29iuREfxbunzcMIv0ZBcH/G/80jjp+bQzszG0+V25IRQe/QtvbSZyNRXFZuQ:4FuXs2ERXmrEDT","tlshash":"910254ac38b84c5f09673f4199d79e5728d4b217e888fca0b48ed75513c2fa60678c79","first_seen":"2026-09-15T13:34:16.10512Z","last_seen":"2026-09-15T13:34:16.10512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/index-CbMJaKeB.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.409Z","timestamp":1789479217409,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/index-CbMJaKeB.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/charting_library/charting_library.min.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:29.570Z","timestamp":1789479209570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 03 Oct 2025 05:17:54 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2V9ld6cCcMXZIoUhuw%2F1RPHykxZxHNM%2FOzjbxb%2BmnMK59jM9ETJA71jXMGR4owYe4Hc6pp7Xwpjq7dW9c20LolcSb6uwarc7BKsbdUT7DoDPzSjNbe%2F2LWrhw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"68df5c82-2a6b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800e3df8f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":4150,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-09-15T17:09:38.397132Z","times_seen":1753,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/platform/dev/config.js?1789479211401","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:31.405Z","timestamp":1789479211405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /platform/dev/config.js?1789479211401 HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:31 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9zCChraig3v0o%2F6dwsut52mMQVbAYDNLHxS97T8y1A9cfYMCr5aomoB85D%2BV6eMBH1TMqcRDxDOwE1%2BeLetsfng0JZ1vl2LFv3mkaMViC3uq6Z3rhFE%2FcIpOrA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800ef49581a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150,"size_decoded":705,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-15T15:05:07.194718Z","times_seen":39449,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/widget-xCRxRgK4.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.361Z","timestamp":1789479217361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/widget-xCRxRgK4.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":90336,"size_decoded":28951,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63723)","md5":"e87052dd6a26181cacf77b1f8b706415","sha1":"8f41b60af322c60061536e9d77532118a6b78017","sha256":"8529f8afafb3583f4ef247b2c875a2b2b68b5e0d70bd4f0acfae1e6bb73811e2","sha512":"4bcfe256407272856089dd03e884da5026d9a3519b8f5434573c89926fcad7758772da8f4770f4caf81919046821c36d4d7f7c49f9aa9eee4b9db34eb3e645fe","ssdeep":"1536:zr6gDjV9WVWxK+SKRka0hnkSPFIxFmnS6nqZL2:KsSdhndFu4nMp2","tlshash":"1e934cd1b0d3957607a398a4901e2204f33adf69a8c9f844fb9cddd2798948d507bfb8","first_seen":"2024-12-12T23:56:34.200487Z","last_seen":"2026-09-15T13:38:37.864373Z","times_seen":50,"resource_available":true,"data":null}},"time_used":1064,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1064,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/vue-router-CNCrM2WK.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.394Z","timestamp":1789479217394,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/vue-router-CNCrM2WK.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/module-CGzIBJZi.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.399Z","timestamp":1789479217399,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/module-CGzIBJZi.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/resource/images/light/nowallet.png?2.0.1789408176792","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:33.372Z","timestamp":1789479213372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /resource/images/light/nowallet.png?2.0.1789408176792 HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:33 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Oct 2025 05:17:55 GMT\r\npriority: u=4,i\r\netag: \"68df5c83-8c14\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LM4yCmTgdsA1DKxU%2B%2B7JG0qkhHCbU5Wwg2AUiE9B2lDEUjN6UjOQ2ulpb4KAN%2BHPv%2FMVzTKrDXdQlBse221FD5V5gs9hASRKVq%2FdgF5Hj0G5mmefuq%2F%2FnDDniA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800fb9b531a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35860\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35860,"size_decoded":36551,"mime_type":"image/png","magic":"PNG image data, 800 x 356, 8-bit/color RGB, non-interlaced","md5":"a3877c3de6991724167020f4746cd343","sha1":"96568f8b5ed09a56ac2f9fece74d54bc7629d57d","sha256":"e63c8b25303ff05fad80631688c5638be2edd6c29bc8b92670ba4780a8fab25d","sha512":"7aeb267846808fa244c76e55be3dc5f337bfc6d8e82b6e1a5af73553985bf6e4b3ca6e26064c94bc8cd227bebb3bdb01ba46dc534cabc90ebabf488ef3569cea","ssdeep":"768:/N1IBFqG0kSI5ta4rUSlWUbsylujjXL+GFCTh:/NCqTkdECAUIPXSGmh","tlshash":"18f2f102fe7af081f32ce1f3a5662f77562e111ddf86e62672dad45e01011b62b91c8d","first_seen":"2025-04-13T20:28:04.816981Z","last_seen":"2026-09-15T13:34:16.108446Z","times_seen":56,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":566,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/widget-CvWjbzuH.css","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.363Z","timestamp":1789479217363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/widget-CvWjbzuH.css HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214662,"size_decoded":37731,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"caf9e2362fa2efed1957e1b622246c64","sha1":"299b4e9dfa075ca9a4e07a69a66fb9453bf3f6cd","sha256":"f2246309c7e25249f8eedffb0d22f13e3a2646dd526b816ad718be85257c2976","sha512":"2ef42743c6932eb9d954b9fa3b0412d1539a132121c032a620b9829f88afc03158067a615d5e7b3c46b28655422e4b70d9695dd33d2f6f3ba21e7da8a25011bc","ssdeep":"6144:AcAho3UcwBc7dLHFBmSIfcDNOlYX0EXnncR2hnXb+F8CJFQ/YZfX0tcitkvIT3VG:U","tlshash":"8f2484adaa60607f7c2755f9e1a8ae5ca31e32d0ee655bfdb85233204ec13f25c53124","first_seen":"2024-12-26T12:46:44.373451Z","last_seen":"2026-09-15T13:38:37.895827Z","times_seen":44,"resource_available":false,"data":null}},"time_used":3656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/Branding-snHbT51t.css","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.367Z","timestamp":1789479217367,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/Branding-snHbT51t.css HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 324\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":324,"size_decoded":616,"mime_type":"text/css","magic":"ASCII text, with very long lines (323)","md5":"3b25d71e577f94f8e9120b88eab46f20","sha1":"f7db8c35ca698f5555ba259e4f49cd5bec2b492c","sha256":"482d5797119f1c1b4169d20b1de6d18fc89cd82b7a4cb32b9f9651de8f7c4803","sha512":"d9017b4eee2ada39ffd5969c2cd6120d19f726a596193393aff3157144d169b095c0d3600d1b114b72f2bdc93204552a932f207c0195a50c1c2c44bdab8b91fd","ssdeep":"","tlshash":"66e026be965d398d0027c709e0f0668000017e8b51320e8278e66d3a8f672213c435e8","first_seen":"2024-10-25T14:46:11.777364Z","last_seen":"2026-09-15T13:38:37.865119Z","times_seen":212,"resource_available":false,"data":null}},"time_used":5989,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5989,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/axios-CCb-kr4I.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"8.212.161.30","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Philippines","country_code":"PH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.378Z","timestamp":1789479217378,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kf.dl237x.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Sat, 05 Sep 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"25:BC:30:E6:21:D7:19:24:E2:DD:22:D7:47:D4:82:E0:56:1A:D1:E5","sha256":"8F:FE:F0:0B:25:D1:F2:74:DF:7E:CD:9D:A9:0C:96:BD:E4:60:8A:B0:67:2D:F1:C4:9D:2F:4E:D9:57:13:3C:21"}}},"request":{"raw":"GET /vite/assets/axios-CCb-kr4I.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Tue, 15 Sep 2026 13:33:37 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 18 Oct 2024 11:19:59 GMT\r\nx-cache: HIT\r\ncache-control: public, max-age=31556952, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":35017,"size_decoded":15645,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13546)","md5":"afeb60b8a66fc30300f765a41ad308d9","sha1":"c700f9ed30b20f76c9032dc0b836d72c67daef19","sha256":"f12c0627b59efeaef17890331a904185cd475e13fe29d42c9ce5123b6effa59a","sha512":"56af66ecc801536c6d89730e87f50be464cd1f7a3813f288fc2b207179013e54a47d89177ccc80e96ac12d1237f0e49ddbbe9706cbf545f4d38183d2b98b19f5","ssdeep":"768:xtiVOdLK9yCE9UpPt4xuQ8zqXuB5dfJyVycZsy7w8Qqvrdobe0AVYqVE6GGbv5mX:xsYmpD/SLK4c+kAq","tlshash":"63f208d5b6d2b07243ea61f4406b0902f3399915748e84a4f16c9cdb3cb614a97bbfbc","first_seen":"2024-10-25T14:46:12.073212Z","last_seen":"2026-09-15T13:37:28.046556Z","times_seen":257,"resource_available":true,"data":null}},"time_used":12938,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12938,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T13:33:28.689Z","timestamp":1789479208689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZuSrGT9mw%2BZ88%2BrZd8LwXEP13l%2Fa51M2pYUuipUQ%2FcrckvnGslNtbSmV3Hwdjf9%2BKIfZoYwAITeJ7SrkkplAd9VqUp0qyGB5LWvJClCX3ktnxEEnB3F%2FFXk1Q%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a3b800de9ec21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15244,"size_decoded":8750,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4168), with CRLF, LF line terminators","md5":"662445c7f3299fceb271b09408beb710","sha1":"00b8d39bec3f64de1de585e3dfe0a22416a0d32c","sha256":"7e0a3d24204006d1dacab13c5dcbb61500cd3e3f3c2d95b5e3e57568782e43ec","sha512":"46b23cc5497798779b0b52a289441061cce3575852a193dd8e48fe675610359b7e1fda4bdac4659d273535db31acb9bb92a2149358e3a9e85bc2b3ca3bd10a14","ssdeep":"192:+FSyP+UYYqKK//bU0RLdK/RbgISA968b9tDCTwPbhuIF9S3dkBSZCxfy2nfD3bPX:DXQmXLdKJ93bCEQIF9S3WsZCxa2Hi7HO","tlshash":"b7626de745e4c69473f2c326eae6b009fd2221b39546cd84719e24ea0f71ed388c7962","first_seen":"2026-09-15T13:31:55.38527Z","last_seen":"2026-09-15T13:34:16.110573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":4,"connect":31,"send":0,"wait":640,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/vendor-5b98bb0c.js","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:29.575Z","timestamp":1789479209575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /assets/vendor-5b98bb0c.js HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tk9NfeRkBgpLCRnvwSPD%2FZbRfAtmMLFP7H1qIkeJ9gi7Dw3yn%2B1nAAqw2G1RrFDJ6qoZS1vLbvcYCicwp%2FPI3QkzSA%2BzOpBKyRR8pIdze7EAg3J8sg8C1BMYAQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa833b0-f2aae\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800e3df931a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":993966,"size_decoded":344120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"74baffe3b770ddd58a0b632efc89e58b","sha1":"ba0ca5f0fe97b270131819082da9a38c9b9608ee","sha256":"f1148086395e4d31fc31e78312b4699d5383aa827397e66cef39e55dd8710713","sha512":"4c205632e97fc176d8cecb2ab1217ab3acdc613ee79bb0f1ee0972b2d2fbded0afe382c5d9e5a43d2552f1e0ba2463b5a853d12044c6e1229f6bd9d1fe7747dd","ssdeep":"24576:cC9zLUp9ySvifHxCAggjDoxoi+pNLb5c2BsiaZ6/QJ1F/V6+8M8ILHa2Z:cC9zAp9+kAZq8a/Z","tlshash":"22254bd47292f06247e720e640bb0002f2396a59744e8494f669dcdb7db9d8ce27bf39","first_seen":"2025-06-30T08:54:32.206447Z","last_seen":"2026-09-15T13:34:16.111274Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1612,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":1032,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/assets/vendor-72ef657d.css","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:29.580Z","timestamp":1789479209580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Sep 2026 17:49:36 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfO4mXpaoTs5wAk4DryTSS%2FVymkQUH6Yj3TxySnf2LJ2Aa61ncbvL7bidfFGUX3yKLhQRuY6RTzwmQi76zC2gV2UHD0g2KvOUzhUK2DltcmHqG4d8m24FhrgNw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa833b0-16997\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b800e3ef961a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92567,"size_decoded":40179,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-09-15T13:34:16.111792Z","times_seen":388,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnbh.cc/api/common/type/defi_activity_type","fqdn":"opnbh.cc","domain":"opnbh.cc","tld":"cc"},"ip":{"addr":"104.21.7.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://opnbh.cc/","date":"2026-09-15T13:33:33.371Z","timestamp":1789479213371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnbh.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 26 Jul 2026 16:35:51 GMT","end":"Sat, 24 Oct 2026 17:35:40 GMT"},"fingerprint":{"sha1":"6A:A8:DD:26:EA:C0:09:67:F0:4B:05:1D:68:E8:A7:16:B8:94:03:F5","sha256":"8C:30:BF:A4:CC:9A:56:88:44:AB:3F:9D:C2:A6:15:DA:DD:F2:D3:B9:51:6A:D4:57:28:8F:B1:86:3F:94:53:C3"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: opnbh.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://opnbh.cc/\r\nlanguage: en\r\nlang: en\r\nOrigin: https://opnbh.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 13:33:33 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\naccess-control-allow-origin: https://opnbh.cc\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERhb6%2BB1LPA%2BxjB6Tzbw6vz%2BHBQJdKB6ODUyAkuGa2AWC2%2BDztZ481d3ZyjAekgyzIbRqkzVnqMhGhsJ3g1UVXs%2Bl%2FLyYw9LtCNx%2FcoWjS3GIiQGlEnCiqXzkg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3b800fb9b521a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":713,"size_decoded":1146,"mime_type":"application/json","magic":"JSON text data","md5":"d3ef2083b3b07cf614d1281d7263737f","sha1":"536be3cfe039644f7d722f9361972260ef9a3181","sha256":"e6808706b97802fb51a06c7784b8efc703f3f68414adfad67da80393ee5eea88","sha512":"b63f701ac8ceedcc75c6dbdd8869e285231e53e8c6e01015d640d6d156ce15c46062fed4e63ba5eb8ff8ca0fb89511005f48e808cd35bb1a0125b7ae0b2948dc","ssdeep":"","tlshash":"1d012618393edeff198f15e344ed7c143a9c1537a0a4aca0a86b4f3c2ae8071188925d","first_seen":"2025-06-01T04:11:58.661074Z","last_seen":"2026-09-15T14:47:56.809311Z","times_seen":68,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"opnbh.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/MessageTypeHelper-CjbF8VpS.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.384Z","timestamp":1789479217384,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/MessageTypeHelper-CjbF8VpS.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/index-BGZqnxRy.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.388Z","timestamp":1789479217388,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/index-BGZqnxRy.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kf.dl237x.com/vite/assets/index-DaWXXnfb.js","fqdn":"kf.dl237x.com","domain":"dl237x.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o","date":"2026-09-15T13:33:37.404Z","timestamp":1789479217404,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /vite/assets/index-DaWXXnfb.js HTTP/1.1\r\nHost: kf.dl237x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://kf.dl237x.com/widget?website_token=adCYJeSg7b5mKKaPUQ2H3z3o\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T16:51:39.996945Z","times_seen":18478937,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}