{"report_id":"3fe314b4-c54c-4cc7-b3ae-00b21766c11c","version":6,"status":"done","tags":[],"date":"2026-06-02T08:18:02Z","url":{"schema":"http","addr":"opnclawx.fun","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"104.21.14.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"title":"OpenClaw AI — Solana Token Analytics","dom":{"size":85396,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18122)","md5":"4856d6ee53e39df61e2a2229dd4633ee","sha1":"e3383cc645397ef8641df0135a9c1afc7d020fce","sha256":"bf516e6ad3fed2241809d77828c9268beae70bbce0a93430a3bed5ca20baa5a7","sha512":"4c257686d9a2768252b399eaae169ef3642286020fc582fd863bf210c4ef1bd4cfb67830036925d3029dfb7135747a82adb88cdc5fde6d543901ab93be5d7aef","ssdeep":"1536:PfJjZIiLqdzqyrYxsGMTKqQokFuwxqQokFuwsyt4bsUqdP+deE70IIZO2u3tJdjY:0zqn4hDArZnd","tlshash":"1f830831f141253b7527a0fae0d4cbae7210a109da135b58b7bc91a6e6c6df36e3258c","dom_hash":"domhash2c5e6db2f754c19f3950bddde5b461b4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"opnclawx.fun","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"104.21.14.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-07T08:18:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"m.rapidlaunch.io","ip":{"addr":"104.26.0.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-04","domain_rank":0,"first_seen":"2026-05-25T11:08:36.313986Z","last_seen":"2026-05-25T11:08:36.313986Z","alert_count":0,"request_count":1,"received_data":1209,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"axiomtrading.sfo3.cdn.digitaloceanspaces.com","ip":{"addr":"104.18.42.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-23","domain_rank":1540557,"first_seen":"2025-09-27T14:20:14.070761Z","last_seen":"2026-05-29T14:24:30.081017Z","alert_count":0,"request_count":1,"received_data":55459,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pumpportal.fun","ip":{"addr":"216.155.134.164","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"2024-04-16","domain_rank":3376171,"first_seen":"2025-08-09T16:10:53.492821Z","last_seen":"2026-06-01T20:18:03.252853Z","alert_count":0,"request_count":1,"received_data":188,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-31T22:21:48.210615Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-06-01T14:50:37.320335Z","alert_count":0,"request_count":1,"received_data":25845,"sent_data":453,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"metadata.j7tracker.io","ip":{"addr":"104.20.46.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-31","domain_rank":0,"first_seen":"2026-04-07T05:04:51.086463Z","last_seen":"2026-05-29T14:24:03.597995Z","alert_count":0,"request_count":1,"received_data":733,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.dicebear.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2013-06-21","domain_rank":868285,"first_seen":"2021-11-13T12:04:00Z","last_seen":"2026-05-29T19:51:15.509073Z","alert_count":0,"request_count":8,"received_data":42907,"sent_data":3991,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"opnclawx.fun","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":66,"request_count":22,"received_data":90482,"sent_data":9810,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"delegate-plenty.data-repo.cc","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-02","domain_rank":0,"first_seen":"2026-05-24T11:27:54.274226Z","last_seen":"2026-06-01T14:48:31.852048Z","alert_count":0,"request_count":4,"received_data":988058,"sent_data":1888,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7efb00a0fbdd48928dfd7f70ea32b5b5","sha1":"e6cbfe75733a7418b64f6bc7e65de9225b95f6a2","sha256":"4e0c085ece2c06771159b63ac45ac4008417c866093af3ff9e5ea07db1fef5c6","sha512":"92cb70e971f296602cf721fa66a82cd39fc68da34108e75a546bf9ae470773b336c79620926d38f7d2554f49043cd1068c659e64c0fa83bd9e3456bb1e2c579e","ssdeep":"","tlshash":"433103d6a66b18100d9769a72162c6863e74406baa5bf0873e2d02708f91f4074ebff8","size":1598,"data":"","first_seen":"2026-04-12T23:28:49.250453Z","last_seen":"2026-06-02T08:39:54.466441Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca47538621e85e9f977b5723181cbbc1","sha1":"5d4b2a75fb973d3d0c41c5f450704167f6d0b352","sha256":"a7041db96c57dc29bb94b6d0980a2cee7ef744b3f842bb020c57a39ac05d67bf","sha512":"3e557940e46be32dc3cbf7bef5329367fe5ae09154979576146e83d2cbb6fe023727976b989d24f27afdcacef317875bb349a6384c110cc4bee2d561aaa1a345","ssdeep":"","tlshash":"2f700082280a82080288802000a00b22202a200c0ac0a20c8c2000a0820a8a820300b0","size":25,"data":"","first_seen":"2023-04-11T08:24:11Z","last_seen":"2026-06-07T22:08:43.896199Z","times_seen":1950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f9d53c01a0d9e778478791210cae14c","sha1":"0668c07f1eaced5eec2873b0ee3aa316f3258d40","sha256":"0d7c4ab6a4ed2d5719c5e33773d41c588c25545d2dbeb2df53ce0f38f475408b","sha512":"6a2b9a305c933677b0bfa0c6b1c3c926d2b20f114b3ff1e33f12663f3bc0ea555e229446530483ceec4c907707ac838ee465a28bae0f279637bc51a46fe9fca1","ssdeep":"192:hNt4wX/csX5r7QmTQ0yn1PzFnGZG8VCRL7on/vIUaqaxhl:hNt4u/csZ04J21LFniuxUdAl","tlshash":"4022e87072ab2134263364f7a161835a35315506fd43c658fa9ce4be9fd39a27633acc","size":10286,"data":"","first_seen":"2026-04-12T23:28:49.25162Z","last_seen":"2026-06-02T08:39:54.467201Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"ca47538621e85e9f977b5723181cbbc1","sha1":"5d4b2a75fb973d3d0c41c5f450704167f6d0b352","sha256":"a7041db96c57dc29bb94b6d0980a2cee7ef744b3f842bb020c57a39ac05d67bf","sha512":"3e557940e46be32dc3cbf7bef5329367fe5ae09154979576146e83d2cbb6fe023727976b989d24f27afdcacef317875bb349a6384c110cc4bee2d561aaa1a345","ssdeep":"","tlshash":"2f700082280a82080288802000a00b22202a200c0ac0a20c8c2000a0820a8a820300b0","size":25,"data":"","first_seen":"2023-04-11T08:24:11Z","last_seen":"2026-06-07T22:08:43.896199Z","times_seen":1950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=jakubkrcmar\u0026backgroundColor=0c0e14\u0026clothesColor=7c3aed","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=jakubkrcmar\u0026backgroundColor=0c0e14\u0026clothesColor=7c3aed HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bdfaa9f1e174b3e9855c948443c2cdaf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5664,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9976986c7014007220d8fc8b3883a5b8","sha1":"c531a7ca438e11298b2c406a604f2975e83ee850","sha256":"34fe65f44ee3eb5c670fc3b86521cffd89ee480943d8b73ec3d46dfbc6d905bc","sha512":"ad58ef0f08b5f2b730d72c3d5884c7f2cb189174d81b3fac68a1b7a5702c6351e6bcf04c2a62d3a184b4bbd4b2aecad3294f1c12f56fcc59b41e56229821cd6f","ssdeep":"96:PBkngREL04rOGWW8UU7Sh0DIa86fEnCX/kCQtFM:JknCs04pw00Ea86f6C4+","tlshash":"69c17872421451ac2d0383adcff390e5271fb0ee7aad0ad4b5f6d77270479dae846914","first_seen":"2026-04-12T23:28:49.246247Z","last_seen":"2026-06-02T08:39:54.440235Z","times_seen":24,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":50,"dns":39,"connect":1,"send":0,"wait":61,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/ai_artificial_intelligence_chip_technology_cpu_icon_179503.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /ai_artificial_intelligence_chip_technology_cpu_icon_179503.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVUuegq4E37bpYG%2FiEdtjbz0zVzrCNy98QP0%2BMwfB5SygSPMTSYUdmmxMxyflQL%2Fh0%2Br%2FRJrwqwINNposNl72XWG41bxj8QFnCW4%2FcE08PeVjLwsouEycTdKFBaLwQc%3D\"}]}\r\netag: W/\"69baa5bc-cc6\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f688be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3270,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36dc7d1727b7ec29a300414dd92478ad","sha1":"7d32e194a8e9bb034933a10446ac47d479b997dc","sha256":"d366af72b1fd7a9f180fd3a01b35b2615f68c5bbc74cc0f0f32702dd238bc6ba","sha512":"6bc3eff90b797e7c2552bb5115966c56562f94bb7ce777043da23d2ab49a989723716e858f709078b22d0a9491f6a5e33b88ce6a9fad187936912fa069c5943b","ssdeep":"","tlshash":"5261e0336314affba841c3488b75061d756a949f7576a0acc79faa1a5e080f305fc993","first_seen":"2026-03-04T22:17:08.414633Z","last_seen":"2026-06-02T08:39:54.440885Z","times_seen":62,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/telegram-svgrepo-com.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /telegram-svgrepo-com.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=culDpxECXZY1mAc%2BLTE%2BeaUN2OSIZEMPHVwpss0bKX%2FFTIj1a7Mj9m77%2FVvTvjCe53p%2F0%2BKfh8QqPcY1SgXEa%2BhUeRsizUZJw5%2FJBKHhxOdM65b9eKRPdjTESeNu764%3D\"}]}\r\netag: W/\"69baa5be-3a1\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f798be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6498fb8edd34fa1c8a7eb95bd3a04b46","sha1":"6c02190cb4fe213971ebaf5613053fda85be6778","sha256":"8fe1a89840073cdfdde28c8b435181512cc4b375ff7db9ffb45f2b58e2654b90","sha512":"0d49a1e210391e56031b175212e9dfd50c5bae86141d5e0a36956fed1384b972d67eee1e66b83e959ea6fc7d37d7b16a4a7c12d50b677a6ddfbb11028f79c27f","ssdeep":"","tlshash":"ec1110bea6eafe25c228d3b8d4049076776d90e3ef8b9451e1805b6be9061ca18458c4","first_seen":"2023-05-21T19:21:49Z","last_seen":"2026-06-07T21:32:43.851872Z","times_seen":141,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"pumpportal.fun/api/data","fqdn":"pumpportal.fun","domain":"pumpportal.fun","tld":"fun"},"ip":{"addr":"216.155.134.164","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pumpportal.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Apr 2026 00:25:18 GMT","end":"Tue, 07 Jul 2026 00:25:17 GMT"},"fingerprint":{"sha1":"97:48:9C:14:9D:70:4D:26:8B:5E:7E:9B:C9:6B:5B:3B:B8:60:04:17","sha256":"FA:65:8D:34:02:3C:9D:E0:2C:19:54:CD:13:FB:8A:1D:1D:03:D5:00:B6:56:ED:3A:A7:D7:27:D5:0F:07:64:4F"}}},"request":{"raw":"GET /api/data HTTP/1.1\r\nHost: pumpportal.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://opnclawx.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sAK0lMcejKJWFGsCNJSrkg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.22.1\r\nDate: Tue, 02 Jun 2026 08:17:41 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: nMK4hWg6TlBGdldqyva+jigyggU=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T22:34:23.045387Z","times_seen":16223158,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":1,"connect":87,"send":0,"wait":87,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/OHSbS4ZFYJf2bHS1","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /OHSbS4ZFYJf2bHS1 HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=smKUAZKDNerOppqXVh1r5BZlEwr4yUsQ5%2FVNRTAeGwMwcRPBRlne5VDohTYWF0OOQl3WaMf8TUvuawUQF7BwH0rYQuzRMsURoM8SzagMUQHeRJ1%2BZhs6T%2BOxn3YkI3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9e8708be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/TAQMx5xzUmJpJn9g","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /TAQMx5xzUmJpJn9g HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeAhVMKiutC8feeJuVqZqABtbCAn1lDsvmbS7VLfK7U0rxoHxQWxX8DDqAjHTgi3VLCbLsLDbIEpMgGTAr%2BjynfUUDKoA%2B7cmrJw3ZDIOJov8uYD0Ug1KUPT%2BS98N7E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9e8778be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/KK4zJQJ1gGPdDfSa","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /KK4zJQJ1gGPdDfSa HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmGXiiT4KBa4pGB51jR%2FZuWgcqGCxzmsjRedJIcLlo0eP8BlstwUpA7px4WPwVED%2BJntux5bQaJIVA2lLxeNHxwKK0d2eHHAxcLV0XCps5YyhtpJ3wi4yq5kBOOkEII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f8908be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:42.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 02 Jun 2026 08:17:42 GMT\r\ndate: Tue, 02 Jun 2026 08:17:42 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-07T22:34:46.038164Z","times_seen":29546,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":90,"dns":1,"connect":14,"send":0,"wait":33,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=petecodes\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=petecodes\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0df8c29cebca4eacd47ff45d20662d4c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ee1f5b270529357b20f4b1320345c86","sha1":"87222582aaf73d43d44afdb3d259aab997738ab2","sha256":"ff0db6ade1d642a2a327b10064303189c537bdb06257056a062fcd94d7e41d18","sha512":"1a8b2bc6059c9fef1abb07497a89a6d5ab25286cd8b16c38b6e607feedab0d04f91cf75025ff66bbabc8017ebc7753aa4d3ee055adfbb49411ab993c250b5469","ssdeep":"96:PBkngRED04SOqz++C8GKIEtRMugWxEuwx92SnHUhbTCPe:JknCw04sLRf9waSHmbTf","tlshash":"f2c184b29a08116c150347b5ceb269f1372f91eebbca0384f5be8731b043ad9d986858","first_seen":"2026-04-12T23:28:49.240645Z","last_seen":"2026-06-02T08:39:54.441875Z","times_seen":24,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":52,"dns":36,"connect":7,"send":0,"wait":137,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/token-boosts/latest/v1","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"172.64.149.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 06:42:34 GMT","end":"Sat, 22 Aug 2026 07:42:20 GMT"},"fingerprint":{"sha1":"46:14:88:C6:44:E5:BC:78:59:8C:7D:E3:6F:49:A1:56:EF:03:83:DE","sha256":"55:31:24:42:9C:20:1A:E4:73:A4:E9:DD:52:42:C5:5D:1B:FF:3E:42:FF:2C:13:98:96:59:79:9E:1E:7B:79:31"}}},"request":{"raw":"GET /token-boosts/latest/v1 HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=amNAkw0L.hoDaEZ9y8ztPJKMKH_vz9bQtBLO9ku8cec-1780388261.1675932-1.0.1.1-Jq8yrfgImPCkvVvmFhu99qK_Ff5cImJtnJ2zmxmX8Yt3YCvu3bhBSjud1U00iyGkengszE0P8Z5v.MnpAY5E8IjwEqQISRFVqlp6pYta9bj._A6VYtm8RrzBJe0b_TIIj.qAkMp4M5s8maJo_fKYdQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 02 Jun 2026 08:47:41 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"61c9-jUTyRRroPu2UaQjFb1H/dyfPey4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nexpires: Tue, 02 Jun 2026 08:18:11 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncf-ray: a05505e84af48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25033,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ac2d6e51df6f83887914c3b0cc3e2541","sha1":"8d44f2451ae83eed946908c56f51ff7727cf7b2e","sha256":"19212587295c573df984c15d049763f30996de05060c0752e20437869f46d1af","sha512":"8e030c874cfb7ea9454a12e5dc0be6fbf3c8f397f037312f16cfb7e5679630daa51891fd38bc2d533616680521484d88b02a90f676c521b9c3a1177d451442a6","ssdeep":"768:5zGcL0kBdVLsNL3pLJULa+AhLHY5LGRMLpSLzG8L2VyLcZLIfCLWi+LrzuL++LgR:VbwkBXANuf4jMJwbqIQ3e/SZTgLHz76s","tlshash":"8bb2a8b753d465278b806bcbb49f305da163a04e4e95b84b864cdc7e40f87b1f82ead4","first_seen":"2026-06-02T08:18:07.676734Z","last_seen":"2026-06-02T08:18:07.676734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":35,"connect":2,"send":0,"wait":189,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/MTP6vL4lNAS1d8oG","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /MTP6vL4lNAS1d8oG HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pn3fAwlEuCiOw%2BpafYFnK5hp%2Fw%2BzsbaABMoxkC%2BUna8VFrqXBwF8uS%2FHUHtUreDTLGhJyvmpJkGQjTn511BEj2ByYBAKax05KPcHSj7dunaCKDySBBl5wGUNfpeMBLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f88a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/RwQ19I-bBg63zvRf","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /RwQ19I-bBg63zvRf HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cgCJWryc0eqTAwyijfYEFfKMfurQ0ECbYGhgKC5uPZMg3NpO6xX0VQhLdzKI5ur4A4o1WTYZwtc8iiWmgybwJ3A2QL4farY9aexNY1s2z7mF7lDMosZKswd485triaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f8938be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/ATDK9W7gUGyZCGJB","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /ATDK9W7gUGyZCGJB HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZS3jd87GMU%2FcLwCb3fDjo8f4hH0bWL29kRGy9OfR5Cr2OMOHrfmNeWjWcxkKwkJTXkwVosq2TTJAtXUq4WoKLnKa6ZXe1ZLcfj1jo8Fve09anyXikojbgWCKDR05jco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f89c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/visit?origin=opnclawx.fun","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:42.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"POST /api/visit?origin=opnclawx.fun HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:43 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 2\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YwdOZosoJQGkNRX6wbM4fO2jNu8O8E%2F0fXcoWaB3yilDjzMdhkcHqGeTFE9N1zsLmhLdS5PG77T83Hs1fzYOtvqAdwaIsHVsp6LdSR86BldTjmCNCkkPnQu0%2BZfRGjOeAvVdbcWVNhxFZRxX9%2BKT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a05505f23d67a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-07T22:27:00.892976Z","times_seen":423314,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":282,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metadata.j7tracker.io/m/lHI1ZizPF7","fqdn":"metadata.j7tracker.io","domain":"j7tracker.io","tld":"io"},"ip":{"addr":"104.20.46.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:43.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"e27b4943.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 May 2026 16:32:57 GMT","end":"Wed, 26 Aug 2026 17:32:46 GMT"},"fingerprint":{"sha1":"6A:5F:8D:A3:BB:7E:7B:35:15:26:DA:1F:AB:0A:BD:9F:E8:6E:ED:D4","sha256":"64:97:11:B0:56:3B:30:B0:12:06:0C:6D:5D:7A:85:9F:E3:41:FF:6C:DE:35:04:FB:3C:64:CA:72:AD:91:9B:F3"}}},"request":{"raw":"GET /m/lHI1ZizPF7 HTTP/1.1\r\nHost: metadata.j7tracker.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:44 GMT\r\ncontent-type: application/json\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Tue, 02 Jun 2026 08:17:43 GMT\r\nserver: cloudflare\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"657d298ceb710240f6f23dbdac480a53\"\r\ncontent-encoding: br\r\ncf-ray: a05505f98e44569c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"657d298ceb710240f6f23dbdac480a53","sha1":"f8f6618ce94111073a8ea96d68dabef1589cf828","sha256":"50087db7110864e6b1b659be6ca4907aafb952846b76c39eb9cec90d3df2cdb7","sha512":"90aab887805b5ee586dcff7f4ec126afe3bece1320480068b2b5d21b24074ae85ed4aa59fb7b201e0d632921f6546fafbebf84b5ff2f238729a91ec8881b74f0","ssdeep":"","tlshash":"b6e020d757a4143ae338c1c5255d3d4d611b2b47068765b738c58c1a42f46e6c926544","first_seen":"2026-06-02T08:18:07.678574Z","last_seen":"2026-06-02T08:18:07.678574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":61,"dns":36,"connect":1,"send":0,"wait":170,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/3925430-glass-magnifying-magnifying-glass-search-icon_111561.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /3925430-glass-magnifying-magnifying-glass-search-icon_111561.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3D%2F2aFsclfMsRsrc%2FZGHhtt2SL2A8WlyFfkx5VjPNE5BIzd%2Fkg9rbi3jALCIeogSZ3Z8qbpmQLnVN7eorohjXW8CcNucjTN1blaGhaU4qyekADVcOk0Ql0pP8q5U1k%3D\"}]}\r\netag: W/\"69baa5b6-c38\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f6b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3128,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2813915725ce26ab4a933c5b4d0fb1c5","sha1":"c119b01b01123356ae4fb939871b279fa74b8d6e","sha256":"7d219109581abc8ec69518b3c292adff4d5ed0e74f2ee10555252ea875f840e3","sha512":"664a1ff87053d1b8e9571b34ffc9dab5192782cd795bc5ad47983f2f62bab670938e45052f104f83a5e7a5df6b8306e657bb2b9466cb7702c201d6bada27d75b","ssdeep":"","tlshash":"b7515434b33a19bccac987ad835062a565fd14db307a42cc9b5b0fc65918fe294a4cf5","first_seen":"2026-03-04T22:17:08.408812Z","last_seen":"2026-06-02T08:39:54.447102Z","times_seen":62,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/chart_bullish_icon_157307.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /chart_bullish_icon_157307.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ZwA5vxLPlxKeZBbSRlMzLa7IADXtwrA9z8r0K2qNQBllJ77nNzKmBqZwKdBDtqaTzIneu9lgoqRADXGwufZQJbvdrVJQvBHD9ZOIAJUlr31EA7gRI3TbAK9lQaY2xo%3D\"}]}\r\netag: W/\"69baa5bc-1ba\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f708be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8da180d917d4f462bc32047b4f2c9d79","sha1":"504b70fccce58a0cdf81b4eac31a3cc7d480002c","sha256":"cbdc9e8cf6f33489397ddb558691cd0df8fb1adc872f3e638952d440489b6c82","sha512":"df4569fedc60854ece9719a998a1067d3d594ab16f7167e9cbdcfcee1c7e95c14a05e7f74637272873fe5b311a38ee625822d4b077e6cfe140795346a7f5ac2b","ssdeep":"","tlshash":"fcf05cd251f4d617c44a4ba4ff396a6140ba22aa48c782f9b4b2419060341e47c4cb81","first_seen":"2026-03-04T22:17:08.40962Z","last_seen":"2026-06-02T08:39:54.436763Z","times_seen":62,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/A1-Drsiyz9YimfOC","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /A1-Drsiyz9YimfOC HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpRIQj6B5gxIZBifsD1IFaGdOkrgn95UNKQokVR47oI%2Fgv7O3cJU%2BbIBGdQzFgZXugEeNbJoqxNKEPAdzaTqsJ6ZrDYSNxjMUwUIiSr6jirmYDe%2Bkpnk1uQQevQ5T4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9e86d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/ARwjQ5akL98po0QI","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /ARwjQ5akL98po0QI HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ruppyXp08Z0mFmI7apjakEMwCcFX1vOS3oNF4nDGspg3wLsst48NxSevpVALd4ezuMgcuZ0VGmD3tLl7s0jDGX%2BSElsmFcuLr1rnE85PROkiKY%2BR5ys%2Bo2efWlnGf9Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9e8728be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/2FHbcXQCtnPQSiPT","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /2FHbcXQCtnPQSiPT HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g54F1rGSrn901BDct9voMkagDh7y63fF2y3jtBfn9TQ2M61tcHIrZ1kkaKsai4xbDJKDDoVehmIQptUP2UhylihAHg8L95RePWrPovNCs8v5g6HuFJdna275L8yi%2Frk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f8998be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/favicon.ico","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:42.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ww6PrPwoW6Lic0hRnd6Ng0kJgx%2F8aWNtQJXH5yzeHNS%2FFa9YlIIeUG2rsytPcFotMRtlnpRa%2F9szBaSM0rReG8qIk9tjppJR1kbZSgl5Rr997xcv3RtjIbtHa3Ao1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505ee6f938be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/is-banned","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:42.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:42 GMT\r\ncontent-type: text/plain;charset=utf-8\r\ncontent-length: 1\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ri37Xva4wDhdxDybhgpFJJIdWy0WIJeKci09acU0K9Y7dofvRjWnk%2BTAuKfnwmRz2Eo4P6fHQAF2JEDuooBq22D2NR0YAcIc%2FqmV%2FEBxSsjw7DL4ka%2FJwMxQ9Ct9k9ZqLaYSfJDp%2B%2BwOmoWd00i8\"}]}\r\ncf-ray: a05505f169d68be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-06-07T21:55:44.218351Z","times_seen":114368,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.rapidlaunch.io/m/qsMaT6by","fqdn":"m.rapidlaunch.io","domain":"rapidlaunch.io","tld":"io"},"ip":{"addr":"104.26.0.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:54.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"7c7623e2.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 May 2026 09:04:34 GMT","end":"Thu, 06 Aug 2026 10:04:23 GMT"},"fingerprint":{"sha1":"FD:11:24:B2:E9:DC:D1:47:BD:FA:22:C8:A2:68:AB:1C:EA:ED:E6:BD","sha256":"D8:E2:1C:4A:13:2B:62:27:55:6C:4D:D4:63:89:72:5E:0C:F4:B1:4F:B1:BC:8D:E1:D5:E6:25:98:BD:AF:D1:42"}}},"request":{"raw":"GET /m/qsMaT6by HTTP/1.1\r\nHost: m.rapidlaunch.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:55 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Tue, 02 Jun 2026 08:17:54 GMT\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length,Content-Type,ETag\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zIdxuQhlCybEY%2BrEXqMmp8O9mXNkZbYNaHKj9JOfWeXBAJylyDZ0%2FEUBT3AIAghMj8JaXEjGlgrdw5zK9uSzUesrZfogFY7VthV1MKrj%2FFYp4KHmTkRuSFEuqGMrbgcp0DU%3D\"}]}\r\netag: W/\"7f91a08cac85ffcf4b26561e5d9cf2d6\"\r\ncontent-encoding: br\r\ncf-ray: a055063cdaf55690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7f91a08cac85ffcf4b26561e5d9cf2d6","sha1":"df75ec4900b7e8496380c029b6206fb071427c63","sha256":"0a2e3fcbb257ad2c4444874d279e5ab485199faa5adbe8d8d020fa415dd57d72","sha512":"d916ebc4afd4698149c0c4b2eb0aba73f98903521fbe4350c60deaa80bd58a6704315e68a6707fb57a2d422b9e1e7e7dff0515eba69f1185e890f79b30b5377d","ssdeep":"","tlshash":"f3f0a3d383f46413d724d2d13c17350c680f0b4f06c3d557708c581cc0748d61555d47","first_seen":"2026-06-02T08:18:07.681587Z","last_seen":"2026-06-02T08:18:07.681587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":60,"dns":35,"connect":2,"send":0,"wait":323,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=degenalpha\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=degenalpha\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bb01debb4a69fc5447db044d21967d44\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4163,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35689b6811d0ef26fd7f55caf2136272","sha1":"dc25924825b76f359b9ca1a4c92791845d3114c6","sha256":"c0ac89eb1c58f0e5748110d7811ac9ed3672bf0905434b595dc8b6f5efe25da0","sha512":"60e8607b0a5301034d65b359ee328e7df3a4409062001f6a916b7627b42d4db00c5e849df75d0ba1b7de936c9c2da08315a210e5648bd556556f3c02c669787a","ssdeep":"48:Cq1n8UknGc8oi8I26/tRfvu4Z0dCBhOla2WzIiYo7pTPL3vzZGxQ/uP+CkIr+dJ/:PBkngREG04rOLWzZYo7dLGC6VkIr+b/","tlshash":"7d81a671942822ac140247edcbf694f1332fb2df75850a94f9a84372b0169abec4a648","first_seen":"2026-04-12T23:28:49.242541Z","last_seen":"2026-06-02T08:39:54.446379Z","times_seen":24,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/B9CMzzF_qsSE3Dps","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /B9CMzzF_qsSE3Dps HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcLhJamYmLPJopYxm5bxpN9wJc%2FamjoI3zeNtHZjZOc0sP8OwgekdbSkAq3V66Cy1tVQqGvRcSirHKdrCIOPslxncj%2Ff%2B4Djv792y9546P5ZpTJxl4LK7Ji2DQFVC7o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9f88d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"axiomtrading.sfo3.cdn.digitaloceanspaces.com/Q1ZeXKzP816RsYzE6XFc8fVGxqjhmSGWhwP94rZpump.webp","fqdn":"axiomtrading.sfo3.cdn.digitaloceanspaces.com","domain":"sfo3.cdn.digitaloceanspaces.com","tld":"cdn.digitaloceanspaces.com"},"ip":{"addr":"104.18.42.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:55.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ams3.cdn.digitaloceanspaces.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 23:29:08 GMT","end":"Sat, 18 Jul 2026 00:28:57 GMT"},"fingerprint":{"sha1":"D5:E5:C5:C9:A7:E4:D6:62:09:06:67:38:C9:50:2B:DA:AC:2A:81:9D","sha256":"21:11:85:D9:69:24:A6:86:A5:67:29:FC:D2:EE:00:29:C0:28:72:82:84:85:B2:9A:1F:8B:EF:8D:8C:49:03:83"}}},"request":{"raw":"GET /Q1ZeXKzP816RsYzE6XFc8fVGxqjhmSGWhwP94rZpump.webp HTTP/1.1\r\nHost: axiomtrading.sfo3.cdn.digitaloceanspaces.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54486\r\naccept-ranges: bytes\r\nlast-modified: Tue, 02 Jun 2026 08:16:15 GMT\r\nx-rgw-object-type: Normal\r\netag: \"6db4669f817aae5c3e98e098d1a4de69\"\r\nx-amz-request-id: tx000000c57011496b41bbb-006a1e914f-ae4b6170-sfo3a\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-do-cdn-uuid: dab85e55-c9b4-4ad2-8fa0-d6a313f06d95\r\ncache-control: max-age=600\r\nset-cookie: __cf_bm=UtWKFWFGIS.XOcBTWPOOzsii1AaGnv2RayOV.fcael8-1780388275.1452074-1.0.1.1-MPRua3eRDqR7Kl_b6TXOqw2IcUhpnNJz3Y_qzUnFFf_VTStnSnlcJeEVe0tWbrYfjSu0j0CoSPsRkPj8Yi0Hsoo7xsAe3cPybdNLuTXU1LFAfeEXL7TvsG7kI9bPLLXy; HttpOnly; SameSite=None; Secure; Path=/; Domain=digitaloceanspaces.com; Expires=Tue, 02 Jun 2026 08:47:55 GMT\r\nage: 99\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a055063fab7a5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6db4669f817aae5c3e98e098d1a4de69","sha1":"7cf1a465d9ae1e161994afbb90a926aca63ee623","sha256":"408814f85c259eeb0fdc43d8862f3d7bbb5e197c16d386b6965d9c959ab5abce","sha512":"bdd6ef243876e2b2a19f752a11625f9effe694820e93472aea4227f4772e9d8f30c3b212878d17a8f7c8d24725ea7bd427721085a030cbd1091e1e5f274af6d4","ssdeep":"1536:J9f1f2+8eEgkJdiykcB+9i3mcPLP3TfEsn00Z0XrDoNUYLt1:J9fm3gkfxGymcffEsn00qApT","tlshash":"7a330260a88c4b6952944a7de6e2833f85863173f3847dbaea3b3f71010d72652ccb58","first_seen":"2026-06-02T08:18:07.683889Z","last_seen":"2026-06-02T08:18:07.683889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":55,"dns":34,"connect":1,"send":0,"wait":59,"receive":6,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/Help-80_icon-icons.com_57319.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /Help-80_icon-icons.com_57319.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pYzwg63YTPel7nzedJeX6iNEO8UulRoSXjQyfepZSpMPDQfTTxRRSOGBEu6eqYEILX1cqdyYRTrbqH1IYfK6cWhG4z512Z1Re0gjQfPqABCI4oKq32wl0CG0DkG4NbU%3D\"}]}\r\netag: W/\"69baa5b0-3ac\"\r\ncontent-encoding: br\r\ncf-ray: a05505e71f428be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4bd04a3a1e455bdaeb77822dbb57785c","sha1":"427e1fc285ee5e53ab4464d84817b4ca21238065","sha256":"daa27614ac2961ee71ff65bb05bab2f6b3c130ee3fe7192c6a2466269bd628a8","sha512":"e39ed0a2130d0fd2eefdcadaf7058f8a026e1587efdc7d33713ec4619b93feef3996e601925f8972afdf7420a27737a4e270ddb91f7826210a4b02a0911cc2bf","ssdeep":"","tlshash":"37118804c64d8e32a1a1d3409b7895433377196477154eb8f1a99df6fc0d78014ed1df","first_seen":"2026-03-20T19:09:56.444013Z","last_seen":"2026-06-02T08:39:54.443753Z","times_seen":37,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=darrwalk\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=darrwalk\u0026backgroundColor=0c0e14\u0026clothesColor=FF4D4D HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e7e0f173c83b1ede1cbdd8cbe767389c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4521,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd4ebd4dbf501c73344dfa00c5a24458","sha1":"00f70ee2fc5ea89e35fa25d2ecda04ead565d455","sha256":"f700a842cfd1a1d8f939e83913dc2390494c8a1fc8c7209a46201282e3d054f5","sha512":"18db0d7e8e7a0c281b6091cb0f285a924f70fe4b6b94ef90ea1244b488e1fea0034470e158723acc32da5a800e18b05d51b89eaefaf551dfebef304c3ea2b015","ssdeep":"48:Cq1n8UknGc8oi8I26/tRfvu4c0dCBhOla2WhbwWYYM0zCTpvX0YAS74rNlnTUven:PBkngREL04rOLWhC3pvkJSoPTUWkUox4","tlshash":"a29198628618116c480343fecbe5d0f2233f61df7aa905a8b9f98372b0165ebd85b558","first_seen":"2026-04-12T23:28:49.244726Z","last_seen":"2026-06-02T08:39:54.444378Z","times_seen":24,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":51,"dns":40,"connect":1,"send":0,"wait":3,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=solanawhale\u0026backgroundColor=0c0e14\u0026clothesColor=7c3aed","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=solanawhale\u0026backgroundColor=0c0e14\u0026clothesColor=7c3aed HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b4c24fe9efd25ee4d28a6aaee2ae47b7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3826,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee17a536e87a7d8224f15825b8658ccd","sha1":"e996156ef90743b4664396f80ccc031ec95b6ebb","sha256":"d83d9e439e91be9cd5b4d0bc7b10cdc0c8ced6663c61791caef8c8e103a7aad0","sha512":"1db16df373d67d32803a48433d93b48ce06a08f89e50453db1e8de23719809b5b2edb58bb7b671b0ebaf5d49cd6817d4244f83afc93f08fd9a343a8ba75e89b1","ssdeep":"","tlshash":"088185626108105c680243fdc7e5a076233fa2df3a9609d8fedcd76275276abdc87568","first_seen":"2026-04-12T23:28:49.248181Z","last_seen":"2026-06-02T08:39:54.445746Z","times_seen":24,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":35,"connect":7,"send":0,"wait":99,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=cryptomaven\u0026backgroundColor=0c0e14\u0026clothesColor=00e5cc","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=cryptomaven\u0026backgroundColor=0c0e14\u0026clothesColor=00e5cc HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 940a3aecb306a42d39b51e1911f4c801\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5768,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"344d1d9285d50d476589afc177e56cd5","sha1":"1c19310b86c83788f884e7af2a5412385e679fcc","sha256":"ac3466fdf9809a9fc6424182660ec62b10b0a975074692195f23e568f5065230","sha512":"af8415bd757c738c41b19b68a782fb0e62fc8d12cbf966a737e68c2ec9603cb1688d3ebce79fc8f1ed3b868a69bb3c70a98037fb62e379ca69e2a5b35cb9dbf1","ssdeep":"96:PBkngREL04rOLW9BpFipFfLOav0t97p9nwhHijU8:JknCs04g47F2FfLOavg97bgmU8","tlshash":"7bc1b7a19628426c140207bdcbe590b6332f70ee76954bd8b9bcc3b2f0465eedc5a588","first_seen":"2026-04-12T23:28:49.241634Z","last_seen":"2026-06-02T08:39:54.452603Z","times_seen":24,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/coronavirus_covid_corona_virus_stop_icon_149123.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /coronavirus_covid_corona_virus_stop_icon_149123.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAQ%2F8HZEoNwODHHVNrnn6pSC8OvGjVEC22RGBRP5YRwyAWRU1%2BkyWAomEU41yNYcc21EuLHKmwSyT71lqtQ9YESYpYij4GxBPVEtwKMIJphwrUPYem%2FfHjFsW8cBhLs%3D\"}]}\r\netag: W/\"69baa5be-1d7c\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f6d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09c2844e3e815cca7bedb16e45b45e2d","sha1":"9ae0f42939f19cf6654abd9d46e8e8e855fa9539","sha256":"6984ca90561d5b41e2ae78170d584b07c477364f6aceb0492b5fafdfb467d8c0","sha512":"8c3b31f26bdfce09d4aa8828ac9149f59ad95ef8c6e8644c3c440d1d8650ae804b0b675019197b3020a2acaeffc619b4185cbc2c8f39251c8d0fe35ef10e8152","ssdeep":"192:0QSrlU+ISbK9uGMQ4Pji59uy6B0yaRtz3:0L7bK9uGojir6TO3","tlshash":"52f18b47b342c387bd96206c69f801b739f7f05dc15993c4d792906af4ac2e183ad5ba","first_seen":"2026-03-04T22:17:08.399139Z","last_seen":"2026-06-02T08:39:54.453485Z","times_seen":62,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/solana-sol-icon.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /solana-sol-icon.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upfIyFdVkGFqAa7kR7OJmlvLqufupXc9jCmh97V5kg59ELc556z3L5URPndYsyLKXrezP7XnQltCpiuSE2GBO5jhkQKU153iYobE%2F4uSxxboX6jXpmuj5PdrzIRlxI0%3D\"}]}\r\netag: W/\"69baa5ba-567\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f748be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92a826e2f02ab391d673e1260e1c6f61","sha1":"d8fc67d2ce5ff4d1c70c08d629317b7ef54a49e1","sha256":"5c4408b9e8c25eb57ee9907936c47a894859e7059593b3217801aaa5a3f42a78","sha512":"c0912c331ab2e0a97ed4f13ab22bacd1048796095cac803f1e09c2190467c1a9813402f988cffa9992d78090afd01062ddeaa2c8616d16b98307a7e90aba67d3","ssdeep":"","tlshash":"d621da7f952e2cd7f216c3eccad9548f912de94be2cac2a9d391714b48b01d7419c710","first_seen":"2026-03-04T22:17:08.416508Z","last_seen":"2026-06-02T08:39:54.457652Z","times_seen":63,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/api/config","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:42.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opnclawx.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bkyLJscvATzdWgFedy%2FZIza0vbs0uPtrXfkaazGPzpNATsj7E98cOfVK87EV60TqjDNb%2BWCnPALe%2Fc1rovpi1MCdoJMKayNqpGIkFyVBg%2Fyq0OThx4umvlDsmif52LYAja0CNzqb4tt91t45ig8j\"}]}\r\ncontent-encoding: br\r\ncf-ray: a05505f169d78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"a91fb3dbf006278e3062b0563c8e5492","sha1":"7c2b18616a704157f522db3f2f512c013918a875","sha256":"31578b44f35b4feac00f02799a6aa371b0f4d06a2552d0630fe951edbc6e22e0","sha512":"29496d854808051466b4e396ea1cf55b5e74a838ee8bd2b498fc315b072d67b9fb613e60c685aa9aab9f8a935ea50bd6a0f8cfdd31e4fccd06f9e996367627d2","ssdeep":"","tlshash":"41d02bb269c062fe3805a5d0695ac599039846bb01532358c18da48153951e5b719b64","first_seen":"2026-06-02T08:18:07.688639Z","last_seen":"2026-06-02T08:18:07.688639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-02T08:17:40.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xv49R30GGzWiDeC46tVCwY14gW0BsHZGeh%2FFySSDVS%2BnusN59wusprJ6ticyxOhEOz683ZjPB%2FuyxM6YI%2BV9lx1H8MfuJOyQW0HwJqiXbFK50%2B86bF%2BkT43Ra5MOm2g%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a05505e59c890b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":49176,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7895)","md5":"8a2f7df57a886988c938787c5782dc74","sha1":"3773e1dbdf22a9910b9bad89bbcbc3d01d8f968d","sha256":"1f343a34cb66df191b74ad1af8a68d0c6d19c92d941641cd4af06001bb93d5ac","sha512":"3642c5afb31f0ec7ef370bf3035ad69d529b61f50aeee9d13129f37e92fa30892134c13045bb268c6efdac31aa4ece2d4569a86e0246677ff8064609088585b8","ssdeep":"1536:dfJjZIiLHjTGMTK3xFnEHfcIInkIImbQ5R+crbmTthsE5+LE:nhrinp","tlshash":"cf23fb71a1453035b13790e6f1a197af7120c606eb1345a8fbec57badbc1df26a3268c","first_seen":"2026-06-02T08:18:07.68981Z","last_seen":"2026-06-02T08:19:02.188191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":60,"dns":39,"connect":1,"send":0,"wait":92,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/Phantom_SVG_Icon.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /Phantom_SVG_Icon.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esysmRYFD644GpUi%2BnVle%2F92pTPaDl0MmssaFaOn291gfoD3OAbrikd3kaIQej9wMI04w1n5ldjFzfReLb1HraRpXH%2Fht6gLmPBUCqkdczv%2FEdm%2B3l5x9hJsmZ3d8Eg%3D\"}]}\r\netag: W/\"69baa5ba-494\"\r\ncontent-encoding: br\r\ncf-ray: a05505e71f3e8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3551bcdaa9030369d6f4ced3aca2c2d7","sha1":"0a824fe8aef7ac7c9cca960fbd73314215fd1b53","sha256":"cba044666aa4e96d3e9a672fe8fef830cefa71bc1b445f5779adb1a4d797595a","sha512":"fb859302642a845a0e59bc29e83857c27f3c2a83059c7e5442c03500da60168b018411650c7f82ceaa14e8392f0fc93c901a5cfd1360392988cb140a10f42e8c","ssdeep":"","tlshash":"da21df142f1a03ed6610f2b84e2d11517a8b70d5f04e04bcc6653d95ad6a0ade8b98ef","first_seen":"2026-02-08T14:08:07.356265Z","last_seen":"2026-06-02T08:39:54.435413Z","times_seen":90,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=tysonhutchins\u0026backgroundColor=0c0e14\u0026clothesColor=00e5cc","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=tysonhutchins\u0026backgroundColor=0c0e14\u0026clothesColor=00e5cc HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 76b8d326488675a76dfa7f0aec8c4a44\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4872,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6b9a9a1c6934bdeeb7bb24a85e5ba43","sha1":"86732b87f234af6341244df57998ded319cb3e14","sha256":"9a5fbca84ad319704b67f8e4ba4950da46ffe8dd64d5ed4a92140a57b01e187d","sha512":"62e5aaf2f8c2baedd332f2e5610a229e55427e6ab354042589b750d1519ddc08a6ec3ce2c79a4d7d8e86722d41b877ee7ff5ebc88370d64e281dcc0cfdc9ea39","ssdeep":"96:PBkngREt04COQiinOSh0DIfnDlnRzv45IL80+EHcB:JknCq04v00Efne+o","tlshash":"d4a197b2562811ac680343edcfe190e6273f71ee7ba50a94f56ad373b00789ed856528","first_seen":"2026-04-12T23:28:49.247222Z","last_seen":"2026-06-02T08:39:54.451338Z","times_seen":24,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":50,"dns":38,"connect":1,"send":0,"wait":81,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/42598rocket_99004.svg","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /42598rocket_99004.svg HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Mar 2026 13:16:38 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3DxfQ7eubLliC0bxa3nL8ivNypkGKL2N9nelsrKReHy6TtcSvd6GSsTEdRVy4TpZO2ZeP7%2FChgygghjLPrRj4Srj0tCWn7uBTd4c062k7IIshhZF%2Fc7wnMbeF2D7Bo%3D\"}]}\r\netag: W/\"69baa5b6-1a87\"\r\ncontent-encoding: br\r\ncf-ray: a05505e72f6c8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6791,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1aff4cdd0b4ac28351d10eb241692dc2","sha1":"6f6a3943b035943baf218b9f3c1ecd7945485b9f","sha256":"f8b77b9e3c8d70fabee1a45d9d2aae8022042c8f41e3dcf30d9d2203b7facf25","sha512":"e7686c0613ce9e8a7cfce8b0e5323e9a6a82bfb3a783226aa753a35cdcf79e80782c0b364805025aa460b270a851b8e847bc6135c5617c4530952c3965f7e46e","ssdeep":"192:OvsgKIn7267iZvTq61x35EMx8OIA2av/v:SJ75iZvF1lWp1A3","tlshash":"6de1861ac36d46bae4468108c55121523aa8d6d793b0d3dce73adf66b906df0003ebfd","first_seen":"2026-03-04T22:17:08.404919Z","last_seen":"2026-06-02T08:39:54.436103Z","times_seen":62,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnclawx.fun/KcxFWxSkrRV5wJtP","fqdn":"opnclawx.fun","domain":"opnclawx.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:41.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnclawx.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 20:01:54 GMT","end":"Sun, 23 Aug 2026 20:01:53 GMT"},"fingerprint":{"sha1":"55:F4:97:22:2C:DB:02:D6:84:FA:12:C5:2D:86:E5:7F:B6:1A:AE:3B","sha256":"BB:C2:40:53:58:70:B6:1B:41:67:BA:05:FA:76:6B:9F:C7:02:94:87:07:E4:D5:A9:63:E2:45:5A:9D:AB:10:65"}}},"request":{"raw":"GET /KcxFWxSkrRV5wJtP HTTP/1.1\r\nHost: opnclawx.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GCnVRPTKGWBEf2kUMDV1SmWKy9wMYMP2dESYUsP591WDbaLi7B9Yv8c6RyQbfSR1xl6DSq7kjsUo8KBqyazXX7XtBw2txyxDFhN3pxc0%2Fytw1HN%2Fp7zIouamoEG95sY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a05505e9e87b8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"998368d7c95ea4293237f2320546e440","sha1":"30dfd2d3bb8a7e3241bd7792e90a98ebb70be3a4","sha256":"533a1ca5d6595793725bca7641d9461a0f00dd1732dded3e4281196f5dd21736","sha512":"648c4720a85dbf834be1ba00f0e1b4167cc670fe15896efb00a77fb6e0c225a13aae3da10d85fa6e7f726420d9bb3c20c43466e02296d44153c127b7160e0b97","ssdeep":"","tlshash":"4fc02b2d7513bc4cc563317832c37080c0c6833769bb4112c440800331cf2998bc3397","first_seen":"2023-04-06T02:01:38Z","last_seen":"2026-06-07T22:36:09.101433Z","times_seen":4922,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-02","alert":"Sinkholed","trigger":"opnclawx.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delegate-plenty.data-repo.cc/_nuxt/assets/index.js","fqdn":"delegate-plenty.data-repo.cc","domain":"data-repo.cc","tld":"cc"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"data-repo.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 02 May 2026 20:17:20 GMT","end":"Fri, 31 Jul 2026 20:17:19 GMT"},"fingerprint":{"sha1":"88:F5:64:28:FC:16:B5:83:E0:DC:54:B5:6B:83:6D:F5:CE:FE:4A:DE","sha256":"8C:95:11:4C:0A:4C:BA:BA:B0:F8:52:AB:F2:EE:85:96:E4:8E:65:2C:7F:DF:8F:35:D9:00:23:62:3D:43:1A:58"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: delegate-plenty.data-repo.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://opnclawx.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 01 Jun 2026 18:54:53 GMT\r\netag: W/\"6a1dd57d-f0738\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbEaLfclm%2FJIRSGklWAWSEw7%2BHFZsvOxq5sOddvC%2BdsiH4u91AkhuwyOU4IucaQN2ilSqfjvwd62EEVCktmvjGE6XQ%2B0zPDXG5hi5QYJdK3bso%2BIHSWw9bENELQ0gFXd24cCpThjWyAeShwf07fR\"}]}\r\ncf-ray: a05505e758068be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":984888,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63070), with no line terminators","md5":"ef0288104df442247a3aaaaa2ed0e295","sha1":"61e8623a011d2085804fa171ff69f84dd7978772","sha256":"aed800aab35b526e1ba987591f5ea441da7919a75235d17ac3639baffed5bd16","sha512":"cff6692c8a8a291f74f7694d794df6976d3f87dd08b8444eb20b0d23b38c5bb330bf79eadb9343ae5f373773d2cc8bf1662927759321721758035c8866302c19","ssdeep":"24576:Xv/nnk9BLGxnI8TTJC/ubI1Cci4gqXSwxBj6BUntTjzAV2bbenwQS2WCT:ffk9BLGxnI8TTJC/ubIEci4gqXSwxBjs","tlshash":"e825b59391825b903aa16fc439d25c3a4cc758abd60ecf3955efd8723e70123632967e","first_seen":"2026-06-01T20:18:07.987856Z","last_seen":"2026-06-07T21:31:44.45928Z","times_seen":13,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":31,"dns":28,"connect":1,"send":0,"wait":265,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.dicebear.com/7.x/avataaars/svg?seed=rafadc\u0026backgroundColor=0c0e14\u0026clothesColor=FF6B6B","fqdn":"api.dicebear.com","domain":"dicebear.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnclawx.fun/","date":"2026-06-02T08:17:40.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.dicebear.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 00:02:43 GMT","end":"Sat, 15 Aug 2026 00:02:42 GMT"},"fingerprint":{"sha1":"72:23:EE:02:90:2D:AF:CF:91:FE:92:E6:FA:6A:E2:8F:8B:B8:61:58","sha256":"F8:16:E9:55:9E:38:53:11:2E:C3:82:84:E6:F8:3F:23:4C:78:E5:A2:B2:1C:7C:CE:99:E2:3E:05:A0:F1:83:C0"}}},"request":{"raw":"GET /7.x/avataaars/svg?seed=rafadc\u0026backgroundColor=0c0e14\u0026clothesColor=FF6B6B HTTP/1.1\r\nHost: api.dicebear.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opnclawx.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Jun 2026 08:17:41 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 147563\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\nx-robots-tag: noindex\r\ncontent-disposition: inline; filename=\"avatar.svg\"\r\ncdn-proxyver: 1.55\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/01/2026 20:17:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 72e84fa56ec2888ce5587e76cee58c56\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07209edb87ba0b2716638811ee88fbad","sha1":"9fb45d893b866eb10268d549a7b329fc950fe919","sha256":"b88d3bf8229905a6883bfb7cba4be47b9a3d330cc95fb4b18943b3fb4b2b4f2e","sha512":"8f139d1d26c610e135975ebe35ac37354c64cd808582c65486467742d181819ba8ac61a124aa4c2ba0a03072f04591e31027f52967907c1267226a0d4b18843a","ssdeep":"","tlshash":"ac61b3619928005c200153accbe2a176232f72ef39c20ed5fddcc2b2b4266efe9d7419","first_seen":"2026-04-12T23:28:49.231258Z","last_seen":"2026-06-02T08:39:54.457004Z","times_seen":24,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":51,"dns":37,"connect":3,"send":0,"wait":118,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}