{"report_id":"41bb200d-7bb9-421b-a0f5-fbe6a261bd8b","version":0,"status":"done","tags":[],"date":"2026-09-03T19:11:30Z","url":{"schema":"http","addr":"bnssld.com/","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bnssld.com/","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"title":"Account Security \u0026 Compliance Review","dom":{"size":9620,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6941)","md5":"65159f499addb7d8a8fe84acb43b9f96","sha1":"cce874b126d19527eed89277d8313857999bf12d","sha256":"bcef9c77767f27d447751b228aa8e4be39eb72b75b6ac51dfeb176e3fae7def5","sha512":"efe331e4d97f395381c921a4440987cdc58a076bdd9300db616cb69e63a9a2c9ab27ec61d27d4d674a2e11c377dfa2771ab42c655d9dbb7a35908aff5f3a6495","ssdeep":"192:5ohKSk7hOObBxy0MEQF9tjdRxGIuYTqxRh06Lzt8h1eVKhqaI0EJ2s:5ohKSk7hOObBxy0MEQF9tjdRxGIpqX3r","tlshash":"1612d737290d382b6707ce95f0b0ab1dbcd6df29dc5f80b5a8ea636612e5df0886d500","dom_hash":"domhash0bacb73a9574b0d394bd9a3c2b67db50","first_seen":"2026-09-03T18:47:02.313125Z","last_seen":"2026-09-03T19:11:38.776372Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bnssld.com/","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T19:11:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"bnssld.com","ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-03","domain_rank":0,"first_seen":"2026-09-03T18:46:56.85825Z","last_seen":"2026-09-03T18:46:56.85825Z","alert_count":108,"request_count":27,"received_data":6566150,"sent_data":12508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zws2.web.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":491032,"first_seen":"2021-06-24T06:55:52Z","last_seen":"2026-08-30T23:47:10.909781Z","alert_count":0,"request_count":1,"received_data":220,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"zws2-1.web.telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":279879,"first_seen":"2021-08-26T11:52:04Z","last_seen":"2026-09-01T08:46:01.920207Z","alert_count":0,"request_count":1,"received_data":220,"sent_data":620,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/C5osUxRC.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"212c530f8491ca56c4214de5b23c848c","sha1":"fd8c4ddae3d63071f19b9b57d9f133e8a9f7899f","sha256":"b00a61e8770785d857a7e00d8bd719235dbe8eea10286a06f5b9ee2f4ee33bdf","sha512":"25115bcf3275095cab0c5c81458d7d30e6697dcd69fecd97cc33dcf53ed5290b9ffba87639a2c9ddf6578bac196a6af5a611b8ce8de02cb923d3d1d793d6baad","ssdeep":"192:yzAPjKQ8mvQundiZgpnrpXEZdlLmAIh3u7S8XtgRzUFAujN9:yzgpyOMdLrIpu75ai9","tlshash":"dd32e89477c1f4d0132f5d9da11f78eafa28abb933484c5bd48278613a760958c92a3f","size":10975,"data":"","first_seen":"2026-03-13T13:48:48.619248Z","last_seen":"2026-09-03T19:11:38.818014Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/CHrYT8--.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62541c2159ec86f8571837349c911c79","sha1":"28c123cc1608207a84ccfe66ca6800c089d1b1d1","sha256":"323449ccc906e1dd7e08930579011f72e6e8fa5b17bf7ca3f239b06654010d1e","sha512":"ec0c736707ee1ecf25038ceb078f4c6c03f2b321d919eacb42cf069ce4050baa83c39740012394672445aa37090ef75109eb4549e18bae00b3b7694d8c4a1f9b","ssdeep":"3072:o9vr3jfhvH50zRBFu8b7NweVgFDAi7J+rXFw:i3j5HOzRBFtbF8svrW","tlshash":"98d3e65063c0adc5214f5ff8772f75e6fe09aab836800c8fd2853c443bb79549aa49b6","size":140828,"data":"","first_seen":"2026-03-13T13:48:48.626208Z","last_seen":"2026-09-03T19:11:38.811673Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/0.CTPeAky5.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4801383a988754341949336adbbf37bb","sha1":"930fccac248ff4f2ce2475247127f52caff9e1fa","sha256":"c896cb1b18a13950b19b173ede4afa4f3386c52f61c49e64297590941f8715b8","sha512":"1692b1144f2ddd2b7180b0b625ab65f8ce6c86a09864b876fa5645632c4d3bc3feaee3f4b8a3843d00f762ce57513a23f9b6467fd046bb0c7373cd3d4e56feff","ssdeep":"96:dbJPXrkVSBm0289CdpGg7bfI2Iw1pjRW0DLy95BOqnTR4bSEg:dbJPNm0r9enHbn1pkyL8BlTyg","tlshash":"71a1ea282b8499c8337f58fc599e28d69f14e975b3d0184bd002b9817e57c98919df37","size":5045,"data":"","first_seen":"2026-03-13T13:48:48.624711Z","last_seen":"2026-09-03T19:11:38.792452Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/whI9QvV6.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"195020ac4fa6fb9ee5bbf602a2b19d95","sha1":"d0296822ae69611b699b1b45d9d1e9598771fede","sha256":"205e2e50b7b3c99b57b9af1463f1342957a9ce8ed3d3e411f2e63ffd0352d8f5","sha512":"e9bd7918229c0f8d8269e8ba18dd06b6440fe99a5b6c1f0837a88d30f9226b3dd6d0b3d44f899cb1182680e1c624223b46dd6a50e98deadb2a21d096e4b52f73","ssdeep":"","tlshash":"6171a4ec67e2a4e4136f4eff1f27b0d99b56fa2137d44c8a84401c823b724a540a6f72","size":3694,"data":"","first_seen":"2026-03-13T13:48:48.628268Z","last_seen":"2026-09-03T19:11:38.780625Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/2.Bm9Gjl7-.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c449b21e7c36c5b108f68537f6b2510e","sha1":"72c393d229d8bfa8446841559acd8566acdcb832","sha256":"ce560d7f9fb3f00fa2a839bd17c94a5e09e768a9bb6207bfdf521a2c40c0d06f","sha512":"7b1e18c8e639f4adc4d4d776025062756cff2c964c70fc204ab8f38298daa534bbad01018ab64848ba49963356f3a8785b61ca22a0e72ca06b4d3150aaaf60a4","ssdeep":"12288:umkLCvZNWO50A35VWS7oVnZeEOS2oyxfHRjW7Ys1v70YlXqXf8e:dN3Wsx1vd","tlshash":"90f47d805385a9d071534a6023df38ebff19a16834513dcbdac1ee447ab7c84a9b9c7b","size":765888,"data":"","first_seen":"2026-03-13T13:48:48.642055Z","last_seen":"2026-09-03T19:11:38.781714Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/gs_-JJyD.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fb3b341d0d521d90434111893d7347e","sha1":"5253dd1977341d37a98447ace0bf52bc8ce05356","sha256":"939022c0c5e4682328f3cb9f5b8a1a0cd5f0685cbfc9f9ff6eb1f35cb3186399","sha512":"ae964cdd59ad0c0f4027aae6250b661ead93f8dbf0bd0d71824dc1ac22fe484fd518ca5b52c2aa50b01149d81d55c8ed11433033ddb41d47a646fdaed1f97ba0","ssdeep":"","tlshash":"c171c7b85bd0f8e4139f4fddab0f85d2bb55d97833881c0680882aa23d238d44146f3b","size":3623,"data":"","first_seen":"2026-03-13T13:48:48.627203Z","last_seen":"2026-09-03T19:11:38.789772Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/CP9f0CAP.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf9c1b6e39325ab24ee65e539c745947","sha1":"982d42eccd7e70802e9c766e86335ad10eae55cc","sha256":"31b9c86b1fa3e9501b29eef3da629d178208e317e2f7e529438f0d1f378bb990","sha512":"8212f3a9187a1049a09cb2d575011dbce8acd80f44a673c9ddbc7c511f076eccd143626b82f2fa38f7af911edd9b22bfc11028c1a43f5a92ea4c7029d1ebed76","ssdeep":"192:1KBR5iaruxHN1xComii58PTwdDc7nZVsF9tNMLGxVci/NlRlChU4dXyMkJKnkD1:YmvCPii58PT/7nYtNMiOmPChU4dXyMkF","tlshash":"8632a8a063c499d0214f9fec7a0e36e6fe159b7831941c4be7802d643abbec19d90677","size":11391,"data":"","first_seen":"2026-03-13T13:48:48.641Z","last_seen":"2026-09-03T19:11:38.790455Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/B2BOHiax.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e217a4ac1d03dcc84dfd3cd3dea53820","sha1":"c2f5101dac423c13f1b2de237d1ccb8b781f9367","sha256":"9df03dbe9f00978b985d9cd1b7c7d4be53f4d9ec03bd30109952e044003c39a4","sha512":"aeb48fcc8f854a781f5b2eda8de201b37cbe5046c5a523de8710e28f2cc0b42275d31cf936b3f7969dd2db9cd04c8888b2e930e4e131dff66fdaf5e286230bc5","ssdeep":"24576:lIlPxH7A/rNf3dCVhvRJFKlaU10dlb2eh0oc5iBBq1J1Z2EYx7YeQnpUTdh/4TNi:aqfNCjzH","tlshash":"29b5e66153c4ac8420075fa1731eb6f6ef0de7bc39640c8be5817d14a7bb914aaf49b2","size":2411463,"data":"","first_seen":"2026-03-13T13:48:48.645707Z","last_seen":"2026-09-03T19:11:38.822924Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2f574c8575f65dad16423da0f4327ed","sha1":"60b66345d3515079b81190dac1ae7954bfe1b528","sha256":"786cfd1de01c10d0ee1746688e14b299eafcbd8a4d8a3542e4eb5d60bd218a6a","sha512":"424b54c27c8d642c4328b4b2733e3876f9b66e19bb8a6f3ac07304efc5579d9020938cd5257110fb7db5d5efa4459a7841e130f0d8fd4ee54b3a454e70f9b6ce","ssdeep":"","tlshash":"12e020cfe75d151b455e8b6e6026d3dc697d0074694018eb3c9c797411d6d105699c05","size":365,"data":"","first_seen":"2026-07-26T02:08:31.019012Z","last_seen":"2026-09-03T19:11:38.823871Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/entry/start.EWrczbgO.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4d85ba7f3007de7ad413d62b593f0d1","sha1":"115a646408e4450cc3d2d3c872c2e70e8219ab8e","sha256":"1d6e27d2618af28c06a74d4bb2c01195c03577975f4eea7b2caedccafe2c1435","sha512":"633aa712433275739d5c8067d68c14e72fe69846cd3093d1c10a54cec718617b4495a3621e9c329765e7a0dc35f6c820c720ee1e4852ab9f9b1f171139ac473e","ssdeep":"","tlshash":"2951b7ac2bcc60d00b7f5abe7e0e6de6ff08fa5876d1584a9180254034a26c9402ef37","size":2877,"data":"","first_seen":"2026-03-13T13:48:48.630407Z","last_seen":"2026-09-03T19:11:38.784863Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/entry/app.qTFwn96c.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5a88c00eef8fd5e9411601c4ae4035a","sha1":"29a1ac6a85650eb134033e7374db86b1eaf1ffcf","sha256":"067d3a2673d5c0fa406af528fd76ce6f38fafa059626b1cc05f28ae9b0a717ef","sha512":"5139c5e2b8c6cda76d801ebe855e11681c18b99651bc65ab637c0581459a12805894378d045a328bab74d15380e61ff6fa87ddc413df7bf7e3ab87bf49ac1ce3","ssdeep":"768:ahtbrMugpyOzFSQq/XsqsCuCBiwCNtMoFsTwsPqcm:ahtbrMuOS7fJoNtMoFsZPq9","tlshash":"3bc21a5153c1f8d0228f8ef82b1f74e6ff18e97432440c8fe6852c857b679a49aa5c36","size":27204,"data":"","first_seen":"2026-03-13T13:48:48.643155Z","last_seen":"2026-09-03T19:11:38.79479Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/FG24Cqea.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa3497aff1e370382bf66fda946a470","sha1":"e5cea017a7470586e915d64f73af5a17bbeddf0c","sha256":"2e0f95825722e556d92f560463897178f21237beac268e96c0eb84e7e41688b8","sha512":"5f15097862daf904e7b310f57797ce2d694cd12d24bc8ee8f838c620e781bf1ccf2c8c05937a47726af099d1429bf644971ee3a3f84ddbb35733f83ee7eb0662","ssdeep":"1536:e5Apa7++FlmSiSmw1hAFFDtXg+PET2yQgkBTSXRpBm3p374uXfd1H:e5UEH34jDicETEJTSXR3m3d4Y","tlshash":"5ab3f85023d8a9c4124f8f7c561f75e3fb189a7533841c8bc381fd943bba9a49ea1876","size":110999,"data":"","first_seen":"2026-03-13T13:48:48.621636Z","last_seen":"2026-09-03T19:11:38.785958Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/RhyjyUZ6.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efdb9746edd4236df0eccd72308a4ca8","sha1":"92bf62bc2aa0c698ec04e26edb3f6072795300b7","sha256":"d54388ca646480b7f59f3071fb51b76b9127544fb15304a3dfb2368215db3666","sha512":"77d23bd8ff7e03b12cd86df1746e655e3d1702edda16581b0638eafda5209fc1537fb48642de1e17c7901ae49b6d85ffcd0be81d65469ca26d23092e637e0eda","ssdeep":"192:hf5hyhza5WY7J5KFirxcOrKYyTLPIygxR3cXx6fWIGoIEi7Xp0v8+e+E1z:h2zQhlKTbIygxJCx6fjpiTp0E+VEz","tlshash":"5822f86823c4f8d4039f4eb83e2f75e6af15ba7433940c4bd640a85072e7294db99a77","size":10377,"data":"","first_seen":"2026-03-13T13:48:48.631305Z","last_seen":"2026-09-03T19:11:38.791519Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/DlfAXUo2.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e05ed8a06cb69473ed9b05056b910e06","sha1":"25aae79ae6450a5018d38d6d572505738748941f","sha256":"01f9419495ac82ad25e42bd5e9e99caf832665901fa5cb75450ab2061a28c211","sha512":"0ab18af1060ea69d6973258d24677bb33e71ea2246b2ae2a84125fbb2369b1a43f1b5ab9de97166c847456765596af4a1c111525c6ca4576a056de8ebf0866ee","ssdeep":"768:GqlKBCQ+a1nfyH5Nh6eLILCO3T32LnoxE2lo5Pxf:dJIn6DFLIfD3in7xf","tlshash":"b5f2e65423c4e9d4325f8f7e765e71e2fb05aa7836c02c4ff280ac902a679d49ae1537","size":35926,"data":"","first_seen":"2026-03-13T13:48:48.632215Z","last_seen":"2026-09-03T19:11:38.795881Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/Cug65I-P.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf4f3fe06c9b33dc9aec4f900f84832a","sha1":"01499a96c5e9ebf0eed3ed9a2bdb8bfdaba0c95f","sha256":"a88db695d4831dfff8b839bec28c11f49c851f8d0738989d6f1c98edea0efcd3","sha512":"9e452e3490d3b0a6c0442347bd897bca4f2ece47134b015bc89368e5ae41bdb2ec898667ff65b790a3674aaa5172b5b73b5cbf6586f47597e3f083b25b815c60","ssdeep":"24576:P+Qf3xgg58q7OF37JozadGXQRVF0GysOXe0WOy8HytLYBbOJGyf055I8kP09iuqU:P9kqsi7BhSH0gpf6x3Lv","tlshash":"fac56c5043c098f4617f4bec27da78e6fe8aa67430806ccbd6c0bc692a575c899e5c77","size":2715295,"data":"","first_seen":"2026-07-26T02:08:31.021787Z","last_seen":"2026-09-03T19:11:38.826237Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/Cdwg4PqX.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2caf53b1a75c2e46d56e9d4b460a7e8","sha1":"38ab06bd948ea96284f2ec8170b5ad0d7ae2fcdc","sha256":"f564daba635189f9f508cedde91c2ebfc4856662021b0c8ccee0f6a33da27d2c","sha512":"8cee3a8b47d8a91d5edf3bc64d436195f4611387eef3a4a72945d8d20eed6c7c1a4f0d8076b1b1bae5f6443a76bab3c7aec8bc9faca2a67edfdd40445dd56234","ssdeep":"768:anZUY5yvCf1BwrFT7gZpvf0b1Tr79F+RcKtTBrKRB8PE:anZLFfQ5TcTvfw1Tr79F+RcK3ry","tlshash":"b6f2e82453c8a9d4124f8ff827ae64e2ff19a67c32c11c4fd681bd103bb25949ea1977","size":34283,"data":"","first_seen":"2026-03-13T13:48:48.615692Z","last_seen":"2026-09-03T19:11:38.797521Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/1.DxKrjRyl.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0233c4d014521022562beaf2d6e59475","sha1":"3e141c549812652d976630aacfbd59bbdb27bf9a","sha256":"2089663428825bca38faa353e055d0a482325d8ef089df7e8068af355b7adf5b","sha512":"6900f48a159c82d944c4d6c0e9a67e53ae221ecaf5d2626356654c836eb58ce44b6787358df2dd9e671b96564765af5c3629be88fe3a2adaac582813978b75df","ssdeep":"96:aIy+lOCfw3HOnFR1OybFEPXUSZconsbFizZTHLsNmb3xtYqF:3y8GHm/1FmPXUSZx6ApHLskb31F","tlshash":"4491e9ecb7c4f4f0035f4ded8a0e2ee3e912a99934e5051ec48daa5036a35d05056f7b","size":4478,"data":"","first_seen":"2026-03-13T13:48:48.63781Z","last_seen":"2026-09-03T19:11:38.816595Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/script.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","size":2688,"data":"","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-09-07T14:57:00.579542Z","times_seen":5350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"GramJSINVOKEhelp.GetCountriesList","filename":"https://bnssld.com/_app/immutable/chunks/Cug65I-P.js","line_number":2,"column_number":1117229},{"level":"log","text":"GramJSRESPONSEhelp.GetCountriesListmap[actor:server1.conn0.watcher17.process7//obj51 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[CONSTRUCTOR_ID:map[configurable:true enumerable:true value:2.278585758e+09 writable:true] SUBCLASS_OF_ID:map[configurable:true enumerable:true value:3.929144968e+09 writable:true] className:map[configurable:true enumerable:true value:help.CountriesList writable:true] classType:map[configurable:true enumerable:true value:constructor writable:true] countries:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj52 class:Array extensible:true frozen:false isError:false ownPropertyLength:236 preview:map[kind:ArrayLike length:235] sealed:false type:object] writable:true] hash:map[configurable:true enumerable:true value:1.223747881e+09 writable:true]] ownPropertiesLength:6] sealed:false type:object]","filename":"https://bnssld.com/_app/immutable/chunks/Cug65I-P.js","line_number":2,"column_number":1117229}]},"http":[{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/Cug65I-P.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.344Z","timestamp":1788462651344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/Cug65I-P.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-296e9f\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8AioN%2F%2FNqqZlMcG85pvYaaJlKOIvMet5txeIxmhUfA%2BW4xlmn6f77%2BXBWy0NaEfR64sotD0JsOgAAIU6hZcpk0%2BQ8btdZdX0u2EqYccBI0Par5%2BI2MZ4t%2BIE%2F4Tw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92ec4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2715295,"size_decoded":1359539,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"87aa79ad1118ac04990c4dcbf7c3a181","sha1":"26d7d32ba386173d6262aa6367b20f67016a2ed1","sha256":"48badf261061711ae039705058d2b9c4ddde76174be91f2478981efa07f64f87","sha512":"5f82d5041fbf9564bb92ab664592d57f95200947a36bf8d5cb83b1e28c061fa54a19bb86291771d249eb576a669ceaa09492bedee98a4b11fb199a108bb7da0e","ssdeep":"12288:P+Q3uCUz3OJDc1uxgg58q7O5qm37YaJYYiOSzOyeddGDI+PIBKwVFU:P+Qf3xgg58q7OF37JozadGXQRVFU","tlshash":"3e251a4203d089f5a2bf43a863d6a0e6bdd8be343550acd7d7c0ac7a6d095c0a5b2d77","first_seen":"2026-03-13T13:48:48.620668Z","last_seen":"2026-09-03T19:11:38.779193Z","times_seen":13,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/whI9QvV6.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.818Z","timestamp":1788462652818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/whI9QvV6.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-e6e\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXU9FKjjj2ol1IPopqX9dbS3WJ2FyWjj%2BJBuRWW%2BPcqqHQEJpt51sKlrPqLLjeJUT7XfHE99q32AeB3AczLfTtBx3P%2FBzAms8SLRmWNP1ePSb5LlisYdDJh9w%2FNz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c1e0849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3694,"size_decoded":2918,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3693)","md5":"195020ac4fa6fb9ee5bbf602a2b19d95","sha1":"d0296822ae69611b699b1b45d9d1e9598771fede","sha256":"205e2e50b7b3c99b57b9af1463f1342957a9ce8ed3d3e411f2e63ffd0352d8f5","sha512":"e9bd7918229c0f8d8269e8ba18dd06b6440fe99a5b6c1f0837a88d30f9226b3dd6d0b3d44f899cb1182680e1c624223b46dd6a50e98deadb2a21d096e4b52f73","ssdeep":"","tlshash":"6171a4ec67e2a4e4136f4eff1f27b0d99b56fa2137d44c8a84401c823b724a540a6f72","first_seen":"2026-03-13T13:48:48.628268Z","last_seen":"2026-09-03T19:11:38.780625Z","times_seen":13,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/2.Bm9Gjl7-.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.820Z","timestamp":1788462652820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/nodes/2.Bm9Gjl7-.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-bafc0\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dv%2FbC8%2B7ehvf%2BHaiCLrEpRvFB014IAQNw3UkiDHUJfdfOpzWqiwGdHSl7LhHQe67qOGMiIpJXD6YPGIiv5rB6kdqwpBgcazdm%2FY5bArgFxF1PePaILyWokyM1zpg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c1e0a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765888,"size_decoded":389891,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25933)","md5":"c449b21e7c36c5b108f68537f6b2510e","sha1":"72c393d229d8bfa8446841559acd8566acdcb832","sha256":"ce560d7f9fb3f00fa2a839bd17c94a5e09e768a9bb6207bfdf521a2c40c0d06f","sha512":"7b1e18c8e639f4adc4d4d776025062756cff2c964c70fc204ab8f38298daa534bbad01018ab64848ba49963356f3a8785b61ca22a0e72ca06b4d3150aaaf60a4","ssdeep":"12288:umkLCvZNWO50A35VWS7oVnZeEOS2oyxfHRjW7Ys1v70YlXqXf8e:dN3Wsx1vd","tlshash":"90f47d805385a9d071534a6023df38ebff19a16834513dcbdac1ee447ab7c84a9b9c7b","first_seen":"2026-03-13T13:48:48.642055Z","last_seen":"2026-09-03T19:11:38.781714Z","times_seen":13,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/sticker.DibIbo94.json","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.408Z","timestamp":1788462653408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/sticker.DibIbo94.json HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:53 GMT\r\ncontent-type: application/json\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtNqLMHpRX2TaF4cnO%2BsfrmQ3SusVVe7YFpmkEfsKNZ7wcJJcWt6rKUpD45EYFc3wujyFd7qKJQiytKmONOJ1njUzAFbYWM3Uob%2BnGJKfn6VswR4Ssye5Ay6KjJB\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"69b27c63-2cdc6\"\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9fcea249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183750,"size_decoded":15983,"mime_type":"application/json","magic":"JSON text data","md5":"9c27b106c0ca90010ea29edc4d2ac20b","sha1":"8a90b6bfecd7a48df596049a8eb3c27d0db38a92","sha256":"f7eec95aa3aaf723d0ab656b31d4bb2158948ff35c3f7903ec75fd389f6c475b","sha512":"f6c9675d506bfced548943567b904115dea12712590b536f76aee8764af139e7f0f3ee3b9aee66fdea83d93a6adf677419c803036a025b8f215fdbd65fb27db1","ssdeep":"3072:cWY265YhQAYzYMQDYtYhQmYcYhQAYzYMQDYtYhQmYq:mYhQAYzYMQDYtYhQmYcYhQAYzYMQDYtk","tlshash":"98047d6bcfbfccdbe648bb88043e56d92ddc46ba45d102d9fe54840bd24b0490a793e9","first_seen":"2026-02-03T14:46:57.723542Z","last_seen":"2026-09-07T08:25:42.374853Z","times_seen":131,"resource_available":false,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":543,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/api/send","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.797Z","timestamp":1788462653797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"POST /api/send HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://bnssld.com/\r\nContent-Length: 230\r\nOrigin: https://bnssld.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":230,"data":"{\"type\":\"event\",\"payload\":{\"website\":\"e92aa0c8-f3ec-4657-a9f2-875901dc3571\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"title\":\"Account Security \u0026 Compliance Review\",\"hostname\":\"bnssld.com\",\"url\":\"https://bnssld.com/\",\"referrer\":\"\"}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:54 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Z9h9xD%2BxPI0jwpBpTg4vn54gYdnU%2BjovnJye6Z5Ys0pGWwlRb8UVydtvqNGXzBclM3kUnlkDtTmT5RZ1wfy36nvyvyPhsOmBDHoHLeZYCHsyZqrlwP9g7smCmQU\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\ncache-control: no-cache, no-cache\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3570ea23f3f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419,"size_decoded":1531,"mime_type":"application/json","magic":"JSON text data","md5":"26669c0f84be3c42d3a35dffcf5698f3","sha1":"aacd1c104606272d62d26a6deb88680d344996f3","sha256":"5c75c0bad33a5b50b3e5fb757383258b20be72110c596b8ed1924bb14fab128c","sha512":"d9e5e8d103db0a0ba7d73f530dc42a17c677accc96af9ad621e937976071cc210c314c2c0d5810d0cae4c62340dd1148b838eb5664558c8083cb23b6db57c8c7","ssdeep":"","tlshash":"ede0f182d4c55cde3e056341e9441a154b7ccae57ac620cad5f8e285d97cb87a20bc9d","first_seen":"2026-09-03T19:11:38.783252Z","last_seen":"2026-09-03T19:11:38.783252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/entry/start.EWrczbgO.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.337Z","timestamp":1788462651337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/entry/start.EWrczbgO.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-b3d\"\r\ncontent-encoding: gzip\r\nage: 1479\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1U69SdwXWsZWC27L1pOO5mucqpsdIgXaCl%2B%2B%2FwE3qFpSlZ2%2FEra6wfkAlrZxbfAUM2mkSkr97gvo%2BuK8ODa42FDTaqdjL%2BERtYHpaPseD6kvSzGR6F8iv7LIErOu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92dc3e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2877,"size_decoded":2473,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2876)","md5":"d4d85ba7f3007de7ad413d62b593f0d1","sha1":"115a646408e4450cc3d2d3c872c2e70e8219ab8e","sha256":"1d6e27d2618af28c06a74d4bb2c01195c03577975f4eea7b2caedccafe2c1435","sha512":"633aa712433275739d5c8067d68c14e72fe69846cd3093d1c10a54cec718617b4495a3621e9c329765e7a0dc35f6c820c720ee1e4852ab9f9b1f171139ac473e","ssdeep":"","tlshash":"2951b7ac2bcc60d00b7f5abe7e0e6de6ff08fa5876d1584a9180254034a26c9402ef37","first_seen":"2026-03-13T13:48:48.630407Z","last_seen":"2026-09-03T19:11:38.784863Z","times_seen":13,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/FG24Cqea.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.340Z","timestamp":1788462651340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/FG24Cqea.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-1b197\"\r\ncontent-encoding: gzip\r\nage: 1479\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kHWFfGIdY6wjvpFw2g1jy%2FP2%2BRsq4knJugYOMA53%2BAqErwD46FxwAIjG8KEY7v2sMk%2FnTa8RmVbZgyiltXLjZ8sF2tjiDpV0luFi2dT10MbUMg9p8cEJW86WDRpX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92ec4049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110999,"size_decoded":53635,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7fa3497aff1e370382bf66fda946a470","sha1":"e5cea017a7470586e915d64f73af5a17bbeddf0c","sha256":"2e0f95825722e556d92f560463897178f21237beac268e96c0eb84e7e41688b8","sha512":"5f15097862daf904e7b310f57797ce2d694cd12d24bc8ee8f838c620e781bf1ccf2c8c05937a47726af099d1429bf644971ee3a3f84ddbb35733f83ee7eb0662","ssdeep":"1536:e5Apa7++FlmSiSmw1hAFFDtXg+PET2yQgkBTSXRpBm3p374uXfd1H:e5UEH34jDicETEJTSXR3m3d4Y","tlshash":"5ab3f85023d8a9c4124f8f7c561f75e3fb189a7533841c8bc381fd943bba9a49ea1876","first_seen":"2026-03-13T13:48:48.621636Z","last_seen":"2026-09-03T19:11:38.785958Z","times_seen":13,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/DemoCardLayout.DKxl9uYJ.css","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.822Z","timestamp":1788462652822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/DemoCardLayout.DKxl9uYJ.css HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JG18yA2n7ODqzL7T4SBAMEfitpDP1hTDBtx7GL7Ngqj9fDF60KAf4JP0qwTkL9pkxmSTUWKbdIwnK22uqKE3y7HM61rim%2B5c0hX%2Fku5Q3PkA0SXO7NHboFK%2F%2Br8s\"}]}\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b27c63-d8\"\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c2e0f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":881,"mime_type":"text/css","magic":"ASCII text","md5":"60358d1b8d754adfd87e82bb7d611cc5","sha1":"9c58a95207fb5146bf42d3ddd876a77ce6682819","sha256":"916224683a1e46e66721a17a40c94ffea14db0a626ae8468242f7f1eaab16a53","sha512":"7d53f31b6fa02805049fc5d294a115ecedafe491d122d55cf3d63e3b82edd32f69c28e2c8e80077298770e89c3c7e9cc2f4aa5c219bbe24ce4581d93219a9c9a","ssdeep":"","tlshash":"ded0c9a01625712ccda7b234f8f121d97c3c82a8bfb70a8e17503e699b99d452392e5d","first_seen":"2026-02-23T08:23:36.89008Z","last_seen":"2026-09-03T19:11:38.786877Z","times_seen":24,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/favicon.ico","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.453Z","timestamp":1788462651453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffm0UBGywv032xU%2B8kpAiq%2F85mXvZ7mErXUzbRCnSdJzUCz3ZiI42Phqv678XHeK5epagXMqzRFuYAX08DuAZMBLg8VN5DLQ2AXdQbK9ztz63R45p%2F39R%2BC2EzT%2B\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3570e939c6149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150,"size_decoded":793,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"597ba0d4396e9c906225140ce907092c","sha1":"28ae2ba65ccdb583d79f85b8cc9509fae697493b","sha256":"ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6","sha512":"8898f14bd6cb5c72d6ee5878af3700be6d03b56a5a21a3d58ef347f008acf4ac68a46a908903e1d42999c1e259e77d7df686c94765865ae07361b2c4e04adf2c","ssdeep":"","tlshash":"18c02b2d24137c0c8663307636c37050c1978337a67e10210400805330cf1998ac33af","first_seen":"2023-04-05T14:00:46Z","last_seen":"2026-09-07T15:17:14.306346Z","times_seen":39361,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/script.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.377Z","timestamp":1788462653377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nx-dns-prefetch-control: on\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Dec 2025 04:19:16 GMT\r\netag: W/\"a80-19b10c8d5a0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WCzNHMdpCp8fqqtVU1GFGBucxkW6CtviU433DEdlCONYcEvVJvcWno54megV3yUSq56PKLENfQeMtuNkSZjy%2F69O4tMX0Zhn9LpNswc9wHzkMIBahtY9spoCm1LQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9f9e9f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":2587,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2687)","md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-09-07T14:57:00.579542Z","times_seen":5350,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":414,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/sticker.6JVXCi3p.png","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.417Z","timestamp":1788462653417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/sticker.6JVXCi3p.png HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=5,i\r\netag: \"69b27c63-4525\"\r\naccept-ranges: bytes\r\nage: 1476\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0RUjcUgx0Z10WKPCbAYhaiPXJ6Xsd7GSJ5QQQSF5mPyr1l0jhuB2bYAHb%2F8QwmbKnRGbjSONnCPXv3bVwWosZ16Fzr3bVyC6wU9bMpFztk9cYiRyDirmuO5naSEG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3570e9fdeab49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17701\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17701,"size_decoded":18473,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"e354a08be90ae5b215ab06faa1927d40","sha1":"ba50f499dd555e22179ca7d303804ab06a0f5f74","sha256":"5d8cdd910b74c7925988b0d7404d5c57881c0ad5169b4147742615b2047b71bf","sha512":"3fd23a9fcd268e0861a6319f83876855eda372ebeb1c3db0b804d77258aa841b5eadf1c0a7ca56cc6a57a781666651b1c89eb963f3f5ba5b6acdb025a7e49ea3","ssdeep":"384:H3KChXjMkwc78QzSsGOHXSnncqoGxnDRqgXxxraGMQb:XKChTM47V4nnnh/FTnri2","tlshash":"9682d1dea33707f852c349433b464a64ed27f88e36174641ed4b321e481718bd8fb66a","first_seen":"2023-08-17T00:33:21Z","last_seen":"2026-09-07T08:25:42.358762Z","times_seen":138,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/gs_-JJyD.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.342Z","timestamp":1788462651342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/gs_-JJyD.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-e27\"\r\ncontent-encoding: gzip\r\nage: 1479\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Bue0EaS89cMXHzJho4VtSauetJIcNbH3sg57Od9W54H4XSKYD3z1KhJfn%2FR3p0w%2BbgopUpCidub2ML5tQMT7YNCRqd30YMwdi6deRMOxVfVMqoLCkZOQuRvVW7T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92ec4149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3623,"size_decoded":2840,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3622)","md5":"7fb3b341d0d521d90434111893d7347e","sha1":"5253dd1977341d37a98447ace0bf52bc8ce05356","sha256":"939022c0c5e4682328f3cb9f5b8a1a0cd5f0685cbfc9f9ff6eb1f35cb3186399","sha512":"ae964cdd59ad0c0f4027aae6250b661ead93f8dbf0bd0d71824dc1ac22fe484fd518ca5b52c2aa50b01149d81d55c8ed11433033ddb41d47a646fdaed1f97ba0","ssdeep":"","tlshash":"c171c7b85bd0f8e4139f4fddab0f85d2bb55d97833881c0680882aa23d238d44146f3b","first_seen":"2026-03-13T13:48:48.627203Z","last_seen":"2026-09-03T19:11:38.789772Z","times_seen":13,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/CP9f0CAP.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.352Z","timestamp":1788462651352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/CP9f0CAP.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2c7f\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Ezglv%2BLhWP4ZTv8btcV7E3I2W4auITGF9giSzbhQirWwmbisPo737idZbek1xr9F8ek4kWQiQMBotrLq2dzVLprLkor0PvR26%2F%2Bjx6BkyLmkBNhknc6MrChczMZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92fc4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11391,"size_decoded":6742,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11390)","md5":"cf9c1b6e39325ab24ee65e539c745947","sha1":"982d42eccd7e70802e9c766e86335ad10eae55cc","sha256":"31b9c86b1fa3e9501b29eef3da629d178208e317e2f7e529438f0d1f378bb990","sha512":"8212f3a9187a1049a09cb2d575011dbce8acd80f44a673c9ddbc7c511f076eccd143626b82f2fa38f7af911edd9b22bfc11028c1a43f5a92ea4c7029d1ebed76","ssdeep":"192:1KBR5iaruxHN1xComii58PTwdDc7nZVsF9tNMLGxVci/NlRlChU4dXyMkJKnkD1:YmvCPii58PT/7nYtNMiOmPChU4dXyMkF","tlshash":"8632a8a063c499d0214f9fec7a0e36e6fe159b7831941c4be7802d643abbec19d90677","first_seen":"2026-03-13T13:48:48.641Z","last_seen":"2026-09-03T19:11:38.790455Z","times_seen":13,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/RhyjyUZ6.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.353Z","timestamp":1788462651353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/RhyjyUZ6.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2889\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLfPFHkONVZIboT7PjMfueR46Q30dBHGf%2BS9Esyd%2FEO1zw%2BUgEemojJ%2BSyY0Tp9Xne0DJvThtSEKqyGcxOrv1%2BnG05YvvQu28RpCh%2BEvEe2rnzMLUxFdo6nCkTK8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92fc4649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10377,"size_decoded":6406,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5554)","md5":"efdb9746edd4236df0eccd72308a4ca8","sha1":"92bf62bc2aa0c698ec04e26edb3f6072795300b7","sha256":"d54388ca646480b7f59f3071fb51b76b9127544fb15304a3dfb2368215db3666","sha512":"77d23bd8ff7e03b12cd86df1746e655e3d1702edda16581b0638eafda5209fc1537fb48642de1e17c7901ae49b6d85ffcd0be81d65469ca26d23092e637e0eda","ssdeep":"192:hf5hyhza5WY7J5KFirxcOrKYyTLPIygxR3cXx6fWIGoIEi7Xp0v8+e+E1z:h2zQhlKTbIygxJCx6fjpiTp0E+VEz","tlshash":"5822f86823c4f8d4039f4eb83e2f75e6af15ba7433940c4bd640a85072e7294db99a77","first_seen":"2026-03-13T13:48:48.631305Z","last_seen":"2026-09-03T19:11:38.791519Z","times_seen":13,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/0.CTPeAky5.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.604Z","timestamp":1788462652604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/nodes/0.CTPeAky5.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-13b5\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRhgQHVQwtwG2W7gOujTGDhHBqX%2Bc2AdYqnkaRbAOGQxX45jbdZKvtNd9biucXkeUhzdtJEo7UbQwGAye6cD98xuF7eL6D8U5ZiUrm64TcwE1%2Be5CYrehz8pYWwf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9acdcc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5045,"size_decoded":3666,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5044)","md5":"4801383a988754341949336adbbf37bb","sha1":"930fccac248ff4f2ce2475247127f52caff9e1fa","sha256":"c896cb1b18a13950b19b173ede4afa4f3386c52f61c49e64297590941f8715b8","sha512":"1692b1144f2ddd2b7180b0b625ab65f8ce6c86a09864b876fa5645632c4d3bc3feaee3f4b8a3843d00f762ce57513a23f9b6467fd046bb0c7373cd3d4e56feff","ssdeep":"96:dbJPXrkVSBm0289CdpGg7bfI2Iw1pjRW0DLy95BOqnTR4bSEg:dbJPNm0r9enHbn1pkyL8BlTyg","tlshash":"71a1ea282b8499c8337f58fc599e28d69f14e975b3d0184bd002b9817e57c98919df37","first_seen":"2026-03-13T13:48:48.624711Z","last_seen":"2026-09-03T19:11:38.792452Z","times_seen":13,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/favicon.DtEl89QP.png","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.410Z","timestamp":1788462653410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/favicon.DtEl89QP.png HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=5,i\r\netag: \"69b27c63-1e98\"\r\naccept-ranges: bytes\r\nage: 1476\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNrMiFcmFUcHb33fXVVn%2FYXkUYTejjZuAFH2JLNXjeB1ymBvluTux4KUIQwMWm7YI5TFN6HlqjOBNWbwMWKQ7O%2FJyMHREEWwytBIkCWOVTG2mXUP5ZSRODLTnimD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3570e9fcea349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7832,"size_decoded":8605,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"403ddda9b001501d632e28b8c28695d7","sha1":"622721189bf14f39854cb2be21e9f213d5efbef6","sha256":"5c25685e71b9fb8269e801f531d2ce7540d522b5c18feb5a626c4fa0e2d5cd71","sha512":"d913e9d338d11f5d2173c92a86081d07f59d33d77fcf52d3ca28b88b859a9728571895c6fa11113e4c6d41f068a1e4a8d9573dec3ba8f9e7e7d58931221cae81","ssdeep":"192:PML0dvYI4M1q/LUSWrcQELh0f0NbgnrV32wyaLEyiIXVi:PP4eczLFggw+4Vi","tlshash":"bff14bf77fdf0c14d11d0540903fa72b996ce4ca93ea6ab62bc49698c82b9db1c1b154","first_seen":"2026-03-10T09:27:25.219952Z","last_seen":"2026-09-03T19:11:38.793138Z","times_seen":14,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T19:10:50.520Z","timestamp":1788462650520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:50 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nstrict-transport-security: max-age=15552000; preload\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mtyaltfIMEb6jjgAE4jNuxR6Lh%2FfGte6QwmGql0ov7fEGuTOYOngwI3y4KDWMEEZR6OuOShR4lmlMMk2sX97R%2BPDU9v%2F5iET%2B9kAMcLQE%2FLJysxzRRZOrE7p823\"}]}\r\ncf-ray: a3570e8e0b7549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":1272,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"0efa7225dd17a2c645fe787bcc66b6f0","sha1":"760b992aa16e53a787aa328ac93b80a7892e3836","sha256":"0b14c9bfa9b610c213c06e042232bc618713f03c3196bd6d6d0b16087ad204ae","sha512":"bcb0d5604cc1dad8702da5d8d3816c9eb8ee52ed1f4477d5b7b344722df1871d88ff21506c5a31a1fde5007ea3c06af43abe54e0ef303c96f5f6c6296f8a19dd","ssdeep":"","tlshash":"e8215b83559aee0b660ede5ea091934c9a87e87d684048f2ac8d617b4dc1eb0125c902","first_seen":"2026-03-13T13:48:48.636614Z","last_seen":"2026-09-03T19:11:38.793813Z","times_seen":11,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":18,"connect":21,"send":0,"wait":441,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/entry/app.qTFwn96c.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.343Z","timestamp":1788462651343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/entry/app.qTFwn96c.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-6a44\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vqSzXspKhrZFPkkVZFKs%2BNO7TxdQxXUQPAXuydsANqcem9ZH%2FhQOTOdEqOBr5PSitFpHoILU3KLq3hco3MNrdw9BZ6Kb2ClaNkwa4vcmspTMYlJlWp86PKGIsyhF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92ec4349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27204,"size_decoded":14765,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26667)","md5":"f5a88c00eef8fd5e9411601c4ae4035a","sha1":"29a1ac6a85650eb134033e7374db86b1eaf1ffcf","sha256":"067d3a2673d5c0fa406af528fd76ce6f38fafa059626b1cc05f28ae9b0a717ef","sha512":"5139c5e2b8c6cda76d801ebe855e11681c18b99651bc65ab637c0581459a12805894378d045a328bab74d15380e61ff6fa87ddc413df7bf7e3ab87bf49ac1ce3","ssdeep":"768:ahtbrMugpyOzFSQq/XsqsCuCBiwCNtMoFsTwsPqcm:ahtbrMuOS7fJoNtMoFsZPq9","tlshash":"3bc21a5153c1f8d0228f8ef82b1f74e6ff18e97432440c8fe6852c857b679a49aa5c36","first_seen":"2026-03-13T13:48:48.643155Z","last_seen":"2026-09-03T19:11:38.79479Z","times_seen":13,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/DlfAXUo2.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.355Z","timestamp":1788462651355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/DlfAXUo2.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-8c56\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5deY1luKYuUWJS7eHrmykp6PLnz9QG9IWvE6hPJ3KESMjiYSJbW%2B2LONJxIo7Kv8eARnBtxTYSWPW5E56MqO5QBOZg8uutkK1yMmaQFB6t6fk3PdoRTOmxR%2BUDJ1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92fc4749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35926,"size_decoded":18879,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35925)","md5":"e05ed8a06cb69473ed9b05056b910e06","sha1":"25aae79ae6450a5018d38d6d572505738748941f","sha256":"01f9419495ac82ad25e42bd5e9e99caf832665901fa5cb75450ab2061a28c211","sha512":"0ab18af1060ea69d6973258d24677bb33e71ea2246b2ae2a84125fbb2369b1a43f1b5ab9de97166c847456765596af4a1c111525c6ca4576a056de8ebf0866ee","ssdeep":"768:GqlKBCQ+a1nfyH5Nh6eLILCO3T32LnoxE2lo5Pxf:dJIn6DFLIfD3in7xf","tlshash":"b5f2e65423c4e9d4325f8f7e765e71e2fb05aa7836c02c4ff280ac902a679d49ae1537","first_seen":"2026-03-13T13:48:48.632215Z","last_seen":"2026-09-03T19:11:38.795881Z","times_seen":13,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://zws2.web.telegram.org/apiws","fqdn":"zws2.web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.807Z","timestamp":1788462652807,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /apiws HTTP/1.1\r\nHost: zws2.web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bnssld.com\r\nSec-WebSocket-Protocol: binary\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: nA9bBRLiRfifm64DKeO9fA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.30.1\r\nDate: Thu, 03 Sep 2026 19:10:52 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: SLLteH+2rHMA9Bb23GUYh44EgP4=\r\nSec-WebSocket-Protocol: binary\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":220,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T16:14:25.086715Z","times_seen":18331493,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":66,"connect":80,"send":0,"wait":19,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/Cdwg4PqX.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.808Z","timestamp":1788462652808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/Cdwg4PqX.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-85eb\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uIo5c1zAq2HbwVmj7n%2F5C73vZlAkBj0sTY4qdCe%2BKiw279my2m0gbM7Vj5Vjy%2BmdEUn%2FGmnRnCI2LK6Na1bbj2lihmv%2FH2pCqLrjrU8UaNyFYkeFyPfGLfMrdK%2Bi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c0e0449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34283,"size_decoded":18357,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34282)","md5":"b2caf53b1a75c2e46d56e9d4b460a7e8","sha1":"38ab06bd948ea96284f2ec8170b5ad0d7ae2fcdc","sha256":"f564daba635189f9f508cedde91c2ebfc4856662021b0c8ccee0f6a33da27d2c","sha512":"8cee3a8b47d8a91d5edf3bc64d436195f4611387eef3a4a72945d8d20eed6c7c1a4f0d8076b1b1bae5f6443a76bab3c7aec8bc9faca2a67edfdd40445dd56234","ssdeep":"768:anZUY5yvCf1BwrFT7gZpvf0b1Tr79F+RcKtTBrKRB8PE:anZLFfQ5TcTvfw1Tr79F+RcK3ry","tlshash":"b6f2e82453c8a9d4124f8ff827ae64e2ff19a67c32c11c4fd681bd103bb25949ea1977","first_seen":"2026-03-13T13:48:48.615692Z","last_seen":"2026-09-03T19:11:38.797521Z","times_seen":13,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/B2BOHiax.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.821Z","timestamp":1788462652821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/B2BOHiax.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-24cbc7\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN5kJd07soWRydzRcDAqlVl%2BmF3FNVDNPAY70YRkEjhJEPU1Gt%2Bt%2BxOmwUSb2a3cp9u7eaDGN3N2Jai3FE0DC8boKQ14SjpxXVHHZLWLVSau9bwbGZYkpWi45uxT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c2e0d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2411463,"size_decoded":1048146,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"14cf9c6f3614ec45de02c29a9ac1f6d5","sha1":"22aaf307b2697d83b960c05494ed70a9eedfa7ef","sha256":"e6de5af7ff61e6f2a08ed79d1794469cd9eafdfa16f194f3aea3ed3732455965","sha512":"23aafe01cf21777017cef07c1b815a2da455a884be3db721f233f4db265a4ac85b1aca8941e129fc1b30154f05ba1de927cee2d80b7947fb51671d1e42e8f11e","ssdeep":"12288:/tIlmxHoxHiox0fOQ01nVkNwI3dCXMDkIzsUWd0pWRJQ6Kla+XreqKoCRdPUv:lIlPxH7A/rNf3dCVhvRJFKlaU10dm","tlshash":"3e25e85193c85c8520471fb53b4abbf7ed09c77c3464188fe9c66e08a7eb9149af8a31","first_seen":"2026-03-13T13:48:48.634282Z","last_seen":"2026-09-03T19:11:38.798295Z","times_seen":13,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/2.z3d6Mcm1.css","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.823Z","timestamp":1788462652823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/2.z3d6Mcm1.css HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=360w9Pta69as0izoQdlIbkw92S8lI7dj7jcxKBetALSLWIDmQAumR%2BLCOpVNNq8H9%2B%2FuOPjMU6naHXZRB%2BDuG0yUjjXAAfK%2FRPb%2BMILXE9YxxhLXT8J%2FGX2zqM%2Fe\"}]}\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"69b27c63-dc\"\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c2e1149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220,"size_decoded":916,"mime_type":"text/css","magic":"ASCII text","md5":"a3eef41adc2fb97e4851229d70270d30","sha1":"ab0d1123430642fd914277c4ff0aedc4062a515d","sha256":"a05320bf19ebd42145280e99208353e2689952c2c18a96fa2a78ff3cb6f97284","sha512":"a3d47bfd047b64297e82314bed42f7925bc5d4faf52a6b0129d92dcd2eb3f23e2cb6aaec6f19ae63996010b4bbe078905b9f79c8a3ebea595555bd68ddee57e8","ssdeep":"","tlshash":"a5d0a75a7749011fc4072fb5f9b89504454b9cd16d320ce321c174940a04fc2b3b6a1d","first_seen":"2026-02-03T14:46:57.686408Z","last_seen":"2026-09-03T19:11:38.810146Z","times_seen":26,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/favicon.DtEl89QP.png","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:53.740Z","timestamp":1788462653740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/favicon.DtEl89QP.png HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\npriority: u=6,i=?0\r\netag: \"69b27c63-1e98\"\r\naccept-ranges: bytes\r\nage: 1476\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnDpe9J4D%2BZI7VqDjQrk%2B7Ago71RZ2Q%2FpoCyhHi4biKkr8sycdUr3dIHNeZQKt1uV4DagvsFz0t0nKtH0YNECqpOqhdSIWhnrSKDyKlsxQrqRFXSpZC7ce4jauFs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a3570ea1ef2549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7832\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7832,"size_decoded":8610,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"403ddda9b001501d632e28b8c28695d7","sha1":"622721189bf14f39854cb2be21e9f213d5efbef6","sha256":"5c25685e71b9fb8269e801f531d2ce7540d522b5c18feb5a626c4fa0e2d5cd71","sha512":"d913e9d338d11f5d2173c92a86081d07f59d33d77fcf52d3ca28b88b859a9728571895c6fa11113e4c6d41f068a1e4a8d9573dec3ba8f9e7e7d58931221cae81","ssdeep":"192:PML0dvYI4M1q/LUSWrcQELh0f0NbgnrV32wyaLEyiIXVi:PP4eczLFggw+4Vi","tlshash":"bff14bf77fdf0c14d11d0540903fa72b996ce4ca93ea6ab62bc49698c82b9db1c1b154","first_seen":"2026-03-10T09:27:25.219952Z","last_seen":"2026-09-03T19:11:38.793138Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/CHrYT8--.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.339Z","timestamp":1788462651339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/CHrYT8--.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2261c\"\r\ncontent-encoding: gzip\r\nage: 1479\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTOhJfQVqI6zH%2FyFzO6PJay7bljDfbmDdsynCj1JXUAq4rB5RcHcZthvSPS4OH4Gx1rx8UrXTki%2BQk91ayNHaUvcdQyE4KzXUlIYV%2Bc9wh5QKipnwka4VbGtgzmI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92dc3f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140828,"size_decoded":69297,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62541c2159ec86f8571837349c911c79","sha1":"28c123cc1608207a84ccfe66ca6800c089d1b1d1","sha256":"323449ccc906e1dd7e08930579011f72e6e8fa5b17bf7ca3f239b06654010d1e","sha512":"ec0c736707ee1ecf25038ceb078f4c6c03f2b321d919eacb42cf069ce4050baa83c39740012394672445aa37090ef75109eb4549e18bae00b3b7694d8c4a1f9b","ssdeep":"3072:o9vr3jfhvH50zRBFu8b7NweVgFDAi7J+rXFw:i3j5HOzRBFtbF8svrW","tlshash":"98d3e65063c0adc5214f5ff8772f75e6fe09aab836800c8fd2853c443bb79549aa49b6","first_seen":"2026-03-13T13:48:48.626208Z","last_seen":"2026-09-03T19:11:38.811673Z","times_seen":13,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/nodes/1.DxKrjRyl.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.811Z","timestamp":1788462652811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/nodes/1.DxKrjRyl.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-117e\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FBktBybW%2FHZ8L0F3AsrOcOGrJ95O%2FCOJv%2FNoO5BHNjLYDzQ33eL8A5ZuUDAAjt%2BER3T3A8Xd%2BZF1IfhQRMFGmKNY3xWDQs7wl7tGHjp8PeoLmycKUknL9xTRj7dD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c1e0649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4478,"size_decoded":3277,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4477)","md5":"0233c4d014521022562beaf2d6e59475","sha1":"3e141c549812652d976630aacfbd59bbdb27bf9a","sha256":"2089663428825bca38faa353e055d0a482325d8ef089df7e8068af355b7adf5b","sha512":"6900f48a159c82d944c4d6c0e9a67e53ae221ecaf5d2626356654c836eb58ce44b6787358df2dd9e671b96564765af5c3629be88fe3a2adaac582813978b75df","ssdeep":"96:aIy+lOCfw3HOnFR1OybFEPXUSZconsbFizZTHLsNmb3xtYqF:3y8GHm/1FmPXUSZx6ApHLskb31F","tlshash":"4491e9ecb7c4f4f0035f4ded8a0e2ee3e912a99934e5051ec48daa5036a35d05056f7b","first_seen":"2026-03-13T13:48:48.63781Z","last_seen":"2026-09-03T19:11:38.816595Z","times_seen":13,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/chunks/C5osUxRC.js","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:51.356Z","timestamp":1788462651356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/chunks/C5osUxRC.js HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-2adf\"\r\ncontent-encoding: gzip\r\nage: 1478\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdsHcuoZJ83n5%2BnBOsDqBIZEFACt46J7sZeUsTL0IKBra5xi5DBpW4Omr18exAjDOPi5SnIT9PBlaHBsBgK7Rqxv1M1eZYhIhjhDEUULV%2FYPqoTSOLm8sWaxuE%2Fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e92fc4949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10975,"size_decoded":6432,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10974)","md5":"212c530f8491ca56c4214de5b23c848c","sha1":"fd8c4ddae3d63071f19b9b57d9f133e8a9f7899f","sha256":"b00a61e8770785d857a7e00d8bd719235dbe8eea10286a06f5b9ee2f4ee33bdf","sha512":"25115bcf3275095cab0c5c81458d7d30e6697dcd69fecd97cc33dcf53ed5290b9ffba87639a2c9ddf6578bac196a6af5a611b8ce8de02cb923d3d1d793d6baad","ssdeep":"192:yzAPjKQ8mvQundiZgpnrpXEZdlLmAIh3u7S8XtgRzUFAujN9:yzgpyOMdLrIpu75ai9","tlshash":"dd32e89477c1f4d0132f5d9da11f78eafa28abb933484c5bd48278613a760958c92a3f","first_seen":"2026-03-13T13:48:48.619248Z","last_seen":"2026-09-03T19:11:38.818014Z","times_seen":13,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnssld.com/_app/immutable/assets/0.Cjp2xXua.css","fqdn":"bnssld.com","domain":"bnssld.com","tld":"com"},"ip":{"addr":"172.67.171.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:52.810Z","timestamp":1788462652810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnssld.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 20:34:18 GMT","end":"Wed, 28 Oct 2026 20:34:17 GMT"},"fingerprint":{"sha1":"4C:93:04:92:3C:C6:65:18:E0:BE:EB:F3:31:17:B5:86:85:E1:C1:B0","sha256":"06:87:1C:68:81:5A:6D:74:D6:2B:22:22:AB:13:2A:CA:C1:89:64:3C:E0:85:DE:D2:AB:B5:46:CA:0D:56:1B:3B"}}},"request":{"raw":"GET /_app/immutable/assets/0.Cjp2xXua.css HTTP/1.1\r\nHost: bnssld.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnssld.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 19:10:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Mar 2026 08:42:11 GMT\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69b27c63-6c86\"\r\ncontent-encoding: gzip\r\nage: 1477\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kp2A4%2BNWS6q63LOtT4psn%2FoH2F%2BGt9TL3pW2BYD17jWrUkPNDifGGPqj6fhZ%2FsxJ0SdjNNwHOXuSzJs0VT3gqL%2FT2t6W1B%2F5jg8%2Fv7woxxCZUH3evNAEO2%2F2mjPQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; preload\r\ncf-ray: a3570e9c0e0549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27782,"size_decoded":7447,"mime_type":"text/css","magic":"ASCII text, with very long lines (27781)","md5":"8d98b06c4d1e43c7bbc58132a3c24ad0","sha1":"3d4a5e3abab8d5e5b0b0213b1a6d064c0e9ad7b1","sha256":"035d8a9a77e009c6a2763f81a389183ed0819e90e904a1a497edeea67a1a4135","sha512":"7806a3cd4c548a92443c9a0a460d721de705dad568d53eda220bcb45f5e4670461531e4ae978ea18a5f101fe70ae73b3a1305591dfec8bffabd7990d12007499","ssdeep":"384:HkNYt4Cg5whnTsYtA9AlS1XjStrkeF0XQ7rk4nx5q:f2whnTsYtZ0XjQkAlnx5q","tlshash":"2dc2b560f216cd7fec63a8e9a35cf41ca2197489de7912d9ff03220267d76f1096ba14","first_seen":"2026-03-10T09:27:25.232019Z","last_seen":"2026-09-03T19:11:38.819701Z","times_seen":14,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bnssld.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bnssld.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://zws2-1.web.telegram.org/apiws","fqdn":"zws2-1.web.telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bnssld.com/","date":"2026-09-03T19:10:54.177Z","timestamp":1788462654177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.web.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 29 Aug 2025 16:48:47 GMT","end":"Wed, 30 Sep 2026 16:48:47 GMT"},"fingerprint":{"sha1":"AC:C6:BB:E5:EE:C9:DE:30:05:3E:F8:7A:06:97:90:26:97:A9:15:B3","sha256":"22:D2:01:7E:95:F5:70:BF:86:00:C5:9D:06:06:05:A1:5A:9C:96:BE:6B:EB:A6:1F:F2:A4:C3:A1:BC:5D:3D:E6"}}},"request":{"raw":"GET /apiws HTTP/1.1\r\nHost: zws2-1.web.telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bnssld.com\r\nSec-WebSocket-Protocol: binary\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 7DwwIJ3j4EC3vqwA0NRf6Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.30.1\r\nDate: Thu, 03 Sep 2026 19:10:54 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ObTEPz2+C4MUzVkPsS+3JOg6gOQ=\r\nSec-WebSocket-Protocol: binary\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":220,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-07T16:14:25.086715Z","times_seen":18331493,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":75,"connect":88,"send":0,"wait":20,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}