{"report_id":"50aab6c2-bd9a-47bd-a5ca-7aa7ff18705f","version":0,"status":"done","tags":[],"date":"2026-08-28T13:18:27Z","url":{"schema":"http","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"104.21.49.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"title":"OpenSea, exchange everything — token trading and NFT marketplace","dom":{"size":1767154,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64745)","md5":"de62b1007e014af9bbca5e608cddae6f","sha1":"386166fb9b0a3946a1e2512767614d1c6fa99c53","sha256":"7e4b4841696a5bf23f4951bec63ea2e235337b1039b476a7fa533dc3c00d9547","sha512":"0beab7ce7c51f6d7e4b78c96c15a582374155e9365368fc2e60b16180776ff4235d4b6d2332ea0c38e6ba7300a1bdf3cebaba315a9bd927139f549d884e353ec","ssdeep":"24576:qna8UgKwntNP+dieoIrQxGgrQxGgnpXK3xI7:qxUgHvotQnQ7X7","tlshash":"7b856cf033244a3b7883829da3b8bcaf6ea9fa43dd474488b35d35a457c7dd5990b580","dom_hash":"domhash0483b5b3e4dc2ad49904639a0c7a0d98","first_seen":"2026-08-28T13:13:11.542591Z","last_seen":"2026-08-28T13:18:35.005654Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"104.21.49.165","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:18:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"opensea.io","ip":{"addr":"172.64.154.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-12-27","domain_rank":6774,"first_seen":"2018-03-19T09:11:27Z","last_seen":"2026-08-28T13:13:09.163408Z","alert_count":0,"request_count":1,"received_data":8549,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":9304,"sent_data":602,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"opnesea.com","ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-08-13T11:43:26.156501Z","last_seen":"2026-08-28T13:13:09.270739Z","alert_count":15,"request_count":15,"received_data":15884857,"sent_data":6878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"opnesea.com/js/bip39-validate.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48eef2938bb8ae28a3885a8fc0ae1eab","sha1":"573ae9e9992abb3fe4546a0cd3ccf454fcd9e1f0","sha256":"8f623327966070cde85d2a613d9cf9de7f6db5809c251c2f97696700e400f8d7","sha512":"6f0186715052c25eeb8f0bd4e57acdd0512b413214a855d068ba409269320acbc7d38a4df69cd114354d563a0e8ee1f2b25915faae3aae7c15c19e2d4761ce65","ssdeep":"","tlshash":"c2516b486dea61496623306d979fc805b9b9d803440cce11bddce5102fe4e7c4afebe9","size":2499,"data":"","first_seen":"2026-08-03T12:29:06.203629Z","last_seen":"2026-08-28T13:18:35.009887Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/main.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"73551923ba03882cde5411a1a3377a58","sha1":"a7fcf7da9eeef58ab82c900cf9d5e526c338b09e","sha256":"29566e392829c7c9d10bea1b9d38fef995e28c048b32a81c08144c00d6dee193","sha512":"8bceb820cf62639f7432ae8c1b4b67054239e6cccfce1002d5d65824bc61ac29d3f181ed996ae94d6c21286bc4593d9927fc818aa8a4fc05d8a511f1a730fe59","ssdeep":"12288:MaIM7sFCelGVrWqNQ/rQxJkcEUM/rQxJkgqBpe+/nAaLiv:MaIMbeUKrQxGzrQxGgApX/nAaLiv","tlshash":"c3453bf023780e766087c29de7797ce76aaaad93d9879448736e0ae45fc3cc4d907580","size":1259406,"data":"","first_seen":"2026-08-28T13:13:11.562138Z","last_seen":"2026-08-28T13:18:35.059036Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ef4018febb77a6679d83ff4491db5b5","sha1":"9676aedb9dd48731c7d80e959072a3b782393712","sha256":"d45eef8ba1af60b067288ba50fabec84b545d7ffde70ca84d795f2bd5d7e5604","sha512":"40f923453a2c27a07fb4aa8409a42f30f2b75d93fb802ba91fd71c9240162316ff5d1dc3dc5fb7814b3f28d6966b23ec44b62e4f1f252dd7362c18075c95c9c6","ssdeep":"","tlshash":"03e0c21a34c6503a12b795aa33b7910a2526370bd49ecb127a5fc9a65f24ca5058664c","size":303,"data":"","first_seen":"2026-08-01T13:18:12.515139Z","last_seen":"2026-08-28T13:18:35.074462Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33286ff94f986f04221b64404ceb6782","sha1":"cf7598dec50b861e625e19d7473ed2df9152b300","sha256":"c81402569b6fd2536c584d3c88d1bb5e9081d8ce8d499d8a26c0dc70ca6144cc","sha512":"e9790418a63c51047798573ea4d9bfff60a00ff7e1bef6b42e51bc8cb989b2ef53752600ac97f7eb7c6770b4372fd0c436ae3da8ea9dd6ba72a033ecf549d353","ssdeep":"","tlshash":"bd015927222233707cd9d5dca8b6d98e39bb500ae40a0090a08e844c1834bc544f7bdc","size":843,"data":"","first_seen":"2026-06-08T13:08:16.104529Z","last_seen":"2026-08-28T13:40:35.637943Z","times_seen":5137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0f7a8ee2567f4a678a1097971edc1b8","sha1":"1197f219bb2e9a7b6d66fd57563b73d8efedbd5f","sha256":"98a6bba81b5ebe8fb8081e728380685c69bc88ac73515cd90728dc3464afd8c2","sha512":"eeb8f801b265b8a78d093d2d3471a982bc48346943970e10b288ba7b9b50d191edd560d0b699d8f3671f6681f27aef358df9a0c349a21d500500452b7e04b270","ssdeep":"","tlshash":"c57000080b28a20000a800000a8a33882002a8e282800003202cec02200c803080abc2","size":24,"data":"","first_seen":"2026-07-20T20:01:00.337843Z","last_seen":"2026-08-28T13:18:35.085169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c28c8b43714b65243df6a2a1bb3e09e","sha1":"d8e22c779b1a530579a6f6b8d3785c04f8398d4e","sha256":"ea7036b465bd3a771468f4f1354e30e53cc0237348c9dca803519366c1d569c5","sha512":"0099eef1773bde3895c9423565287819b3aea5dcb5676642ad5edc96cd6bd083329182df9d84d197c7ed3800d28918f5e929ec0dc1aeefa921d792a438e1b05a","ssdeep":"","tlshash":"9fd05e2fa6b565710573f23a530ffa46283700475008ce153aac4d850f949180af0d96","size":251,"data":"","first_seen":"2026-08-12T16:39:07.596453Z","last_seen":"2026-08-28T13:18:35.086857Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"01329cb678a8507a69493aa90416bde7","sha1":"453a41434d3a7b1fd588fc8ffa62b90b16973e33","sha256":"134448ccb012e0f0cc8df9c1bf0b584c9f3d15e6013c8c82b2b4e6c4279ec665","sha512":"9a50a6068fe18135a067be1b9e8329b9ed16e4ab58061d0ac980cc325a959e4faffd39dda559b4ac338de5ec7b2777f573b139ad52ef729f7080cdab36f7b2f3","ssdeep":"","tlshash":"18e07d1d30a71e741323b031238fdf49381b80478047f40a3a6849fb1fd64544578ecb","size":308,"data":"","first_seen":"2026-08-28T13:13:11.560945Z","last_seen":"2026-08-28T13:18:35.09425Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/js/bip39-wordlist-en.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"df463b03561e7397a33ad47b7c1347b4","sha1":"697ae0eda3dac898c3909204dfe37cfea2946997","sha256":"5f71460e931e11abccb0044e146e8504fd562189a6e82ce890e1a08dd9f95c82","sha512":"85aeea4916553952bcd722f054ffe9fb70602d7f8f4ae4e9741e20d9d414879c0add2c3c2b96bb8de74a95d87a0187bd38b580d46b255a32a947d833b6869657","ssdeep":"384:TD55TEeRlkjZcCXn5X3ucIJK8EkJTQLyto8Vx59uePnCc3:T99xkjpn5Xe7K8EkJUyto8Vx5F/3","tlshash":"eb72022e9a0e8c3fcbdd13de38eb0d4c45ed0453b209056adddedaa4565eb84b00b69d","size":17244,"data":"","first_seen":"2026-08-03T12:29:06.144574Z","last_seen":"2026-08-28T13:18:35.010584Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/js/bip39-seed-validation.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdb160e5a882d8786e5fd91cb71eeed1","sha1":"7b25f8f73fbb92311c8cb7bbb10891acf2e4ca3a","sha256":"436932c798a74dab83ba4f02206e7a2df835403a5a487f3df5cfd692810a42b3","sha512":"58fa971fc9161988a17a5caaff40937511513240a4c984a5386d4f5a7b4d975220e72e5b11e61878e05ae37b7cd3c604cddc7ce1036502e3eb871f26651e64aa","ssdeep":"96:ycA/zZnYrqwAKuaxQhzoh96QAoQSfHMmjWSsWQumTJ6QCUyu+ZByIGGwy91xdq16:3A/zZnYrHAKuaxQFob6QAoQSfHMoWSsQ","tlshash":"5bc1b89a79e220555c6770bdaadfe04a75e00503440ced09395ca3c07f98afd96fabd8","size":5991,"data":"","first_seen":"2026-08-03T12:29:06.120906Z","last_seen":"2026-08-28T13:18:35.024263Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/jquery.min.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-28T16:38:33.954092Z","times_seen":192152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"opnesea.com/jquery.min.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.356Z","timestamp":1787923070356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /jquery.min.js HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a6110da-155ed\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqRChKO9yO4K2cyjSc6axQZtnPC0jPeBc%2BdLxAmV8ZmiqGe5%2FICA0wXMGo%2Fz32r%2FviNxRvUbjMhE2Ay2B3RVT9006uRJrRADer9nrym1j2GRRhuEUTapPYwYCg6XrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935be520b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":31386,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-28T16:38:33.954092Z","times_seen":192152,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.487Z","timestamp":1787923070487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z66aBe56tYLrKxadHzFIei3CJHOcj4WYMP81zLx%2Bubut8kInGSVxSRHxbujOVLXnNGlH0s11%2B5ZW6Mgrd3S7yLTARlv%2BwaDCxuY9zzn1OJq%2Fd0iiBE5wHWqFoLtk1Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a32399368e5b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":609716,"size_decoded":170520,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64799)","md5":"6be3de431ce8e2d0a2b0d1d96fce112d","sha1":"550964c754d2575767677fd3db0b486d96cedc54","sha256":"6b0b58f138f520c7c0329707f04ad0f6adc997464efd9458e4970f05c44889c0","sha512":"8537949ef9ac4ae9c2985562d707d1e82b9ca64250ae57970a86141c0166357d68c0e4f92bfc08a78c4dfbe6a4e7373bc1f18be165b0941fcb8371c694ccdaab","ssdeep":"6144:G3YrdRoQ1S3by6EMQN4hSHBXqYkEz5a4Gl7KQ/u30P8O/OC3Oz10I+jvI4fKhRRA:a/1oaFdbaFOUgKipnswTpCf+jr","tlshash":"1dd41ab1f510c53e6c23a1ada39ce94d6d29f103de201ac8fb5c701697c67f21e6b998","first_seen":"2026-08-28T13:13:11.549242Z","last_seen":"2026-08-28T13:18:35.007421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:17:49.720Z","timestamp":1787923069720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0E3Wu4Iklma4ZAJXM3VRL5huKJyV8IHIbH1ZowcVixKa1S7m3IbRgDio%2Fhit5P50fAXR3uEbNnLAnEENGkvss8634KWmXYUzZASdbnUWwbnAaKuNw5QwSRyaD%2FBFhA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239931fe200b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":609716,"size_decoded":170159,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64799)","md5":"6be3de431ce8e2d0a2b0d1d96fce112d","sha1":"550964c754d2575767677fd3db0b486d96cedc54","sha256":"6b0b58f138f520c7c0329707f04ad0f6adc997464efd9458e4970f05c44889c0","sha512":"8537949ef9ac4ae9c2985562d707d1e82b9ca64250ae57970a86141c0166357d68c0e4f92bfc08a78c4dfbe6a4e7373bc1f18be165b0941fcb8371c694ccdaab","ssdeep":"6144:G3YrdRoQ1S3by6EMQN4hSHBXqYkEz5a4Gl7KQ/u30P8O/OC3Oz10I+jvI4fKhRRA:a/1oaFdbaFOUgKipnswTpCf+jr","tlshash":"1dd41ab1f510c53e6c23a1ada39ce94d6d29f103de201ac8fb5c701697c67f21e6b998","first_seen":"2026-08-28T13:13:11.549242Z","last_seen":"2026-08-28T13:18:35.007421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":12,"connect":19,"send":0,"wait":113,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/s9j6b8.php","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.348Z","timestamp":1787923070348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /s9j6b8.php HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2loma5GpivGEAPTzv0pXXjsbKFKCDdWn3QdkscJJvrdoRzFrewmGa4wqDmz%2FAaz8Vy9Ht0KNx4b8uwlXsIfjQC73frONYmU2OeGvpGnvbTBGmCIJK0RDkIoK0TlAQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935ae500b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":696,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-28T16:37:55.566325Z","times_seen":554729,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/main.css","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.354Z","timestamp":1787923070354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a6110da-143573\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S0xgIdv79EawU8xyHWsNKDJAOpgLjdWA8cprIKZOHsrtXTN6LpdUzmC3hxeBxtx3Kcq4TsXX2cwZSzyIBSjn2DtwZX7WbzRbIPZtI%2FYwreIsoHRvx24dJa%2FQBkQeBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935be510b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1324403,"size_decoded":796990,"mime_type":"text/css","magic":"ASCII text, with very long lines (53813)","md5":"830c1b7dc9d31f4772c0e87a3b00ccc7","sha1":"906f0f9719e999d699df2d0416935bc427c90644","sha256":"84957451654f2194e354f47980a34abddf18be6ec396137f878fa901f9f359f6","sha512":"1dbb5ad95a0108b64cd6172f9a73d5009f19e02ea88fe995882435c9e00bc6039a2922cedec89cf6860b23ac77f259992446b00064c9ff26eaed8884ac639d81","ssdeep":"24576:1IRCHdAUK+aY+kuPaunmHV5mHAgwalOltT6FA:1IRC9AkaYcScODd","tlshash":"9d25f1f27227bcaa47b91e00141d3f60dcac18eb915df948f6487cd6a16c620de7de68","first_seen":"2026-08-28T13:13:11.551244Z","last_seen":"2026-08-28T13:18:35.008797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/js/bip39-validate.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.359Z","timestamp":1787923070359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /js/bip39-validate.js HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:50:04 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a6110dc-9c3\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uEI%2F7smsA9hOlEvISwkKwlzPS3uGI36AP08puzNZ1dqvk7of%2BJV%2BK5eUsUftDWbqpgy7ebW39%2BD1d%2FO2HVTsMTGvqP7VZwBkxgHYUI3cLaLu40MwHc%2FJp9h%2BSnWBkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935be540b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2499,"size_decoded":1699,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"48eef2938bb8ae28a3885a8fc0ae1eab","sha1":"573ae9e9992abb3fe4546a0cd3ccf454fcd9e1f0","sha256":"8f623327966070cde85d2a613d9cf9de7f6db5809c251c2f97696700e400f8d7","sha512":"6f0186715052c25eeb8f0bd4e57acdd0512b413214a855d068ba409269320acbc7d38a4df69cd114354d563a0e8ee1f2b25915faae3aae7c15c19e2d4761ce65","ssdeep":"","tlshash":"c2516b486dea61496623306d979fc805b9b9d803440cce11bddce5102fe4e7c4afebe9","first_seen":"2026-08-03T12:29:06.203629Z","last_seen":"2026-08-28T13:18:35.009887Z","times_seen":15,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.483Z","timestamp":1787923070483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHb%2BosjDhzaQhDbqXR0lLD9%2BSBWYZ6C3sSnceKHbxxd4FwwBWpa4nQ3A9mfFXry7r1ILljiIrlTmzxnb6QJ8TfNpWOV2RRbi1pvb3RUqdRkZRkhUl06l6dhJGPdOuA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a32399368e590b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609716,"size_decoded":170658,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64799)","md5":"6be3de431ce8e2d0a2b0d1d96fce112d","sha1":"550964c754d2575767677fd3db0b486d96cedc54","sha256":"6b0b58f138f520c7c0329707f04ad0f6adc997464efd9458e4970f05c44889c0","sha512":"8537949ef9ac4ae9c2985562d707d1e82b9ca64250ae57970a86141c0166357d68c0e4f92bfc08a78c4dfbe6a4e7373bc1f18be165b0941fcb8371c694ccdaab","ssdeep":"6144:G3YrdRoQ1S3by6EMQN4hSHBXqYkEz5a4Gl7KQ/u30P8O/OC3Oz10I+jvI4fKhRRA:a/1oaFdbaFOUgKipnswTpCf+jr","tlshash":"1dd41ab1f510c53e6c23a1ada39ce94d6d29f103de201ac8fb5c701697c67f21e6b998","first_seen":"2026-08-28T13:13:11.549242Z","last_seen":"2026-08-28T13:18:35.007421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.484Z","timestamp":1787923070484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: accept-encoding\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFEErj%2B0GnqWfhlxgz1d7W9JvPUqh7AoXeciRzZ2SI2EhiRvU%2BjPegH0E7yIdcAqRWGA73OpoJWqWQSiN5yKRQPsUCxOMpVPe3HPG%2BFSRJpXIS5995oFVgqU1wZzig%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a32399368e5a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609716,"size_decoded":170651,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64799)","md5":"6be3de431ce8e2d0a2b0d1d96fce112d","sha1":"550964c754d2575767677fd3db0b486d96cedc54","sha256":"6b0b58f138f520c7c0329707f04ad0f6adc997464efd9458e4970f05c44889c0","sha512":"8537949ef9ac4ae9c2985562d707d1e82b9ca64250ae57970a86141c0166357d68c0e4f92bfc08a78c4dfbe6a4e7373bc1f18be165b0941fcb8371c694ccdaab","ssdeep":"6144:G3YrdRoQ1S3by6EMQN4hSHBXqYkEz5a4Gl7KQ/u30P8O/OC3Oz10I+jvI4fKhRRA:a/1oaFdbaFOUgKipnswTpCf+jr","tlshash":"1dd41ab1f510c53e6c23a1ada39ce94d6d29f103de201ac8fb5c701697c67f21e6b998","first_seen":"2026-08-28T13:13:11.549242Z","last_seen":"2026-08-28T13:18:35.007421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/js/bip39-wordlist-en.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.357Z","timestamp":1787923070357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /js/bip39-wordlist-en.js HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:50:04 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a6110dc-435c\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INwIj6E4RObw0kUsylCjvLJyERXWBX%2FgbEWlSaK3n5yH8wMiwxIzvl4oxJV%2BckjLQ7uhzlZ7fSa5bBrN0y%2FMUyoDmNz2g9wZyKNGu6jhJpHCZfYmP1HqmDzVEp803Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935be530b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17244,"size_decoded":7426,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (17244), with no line terminators","md5":"df463b03561e7397a33ad47b7c1347b4","sha1":"697ae0eda3dac898c3909204dfe37cfea2946997","sha256":"5f71460e931e11abccb0044e146e8504fd562189a6e82ce890e1a08dd9f95c82","sha512":"85aeea4916553952bcd722f054ffe9fb70602d7f8f4ae4e9741e20d9d414879c0add2c3c2b96bb8de74a95d87a0187bd38b580d46b255a32a947d833b6869657","ssdeep":"384:TD55TEeRlkjZcCXn5X3ucIJK8EkJTQLyto8Vx59uePnCc3:T99xkjpn5Xe7K8EkJUyto8Vx5F/3","tlshash":"eb72022e9a0e8c3fcbdd13de38eb0d4c45ed0453b209056adddedaa4565eb84b00b69d","first_seen":"2026-08-03T12:29:06.144574Z","last_seen":"2026-08-28T13:18:35.010584Z","times_seen":15,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/img/coinbase_loading.webm","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.684Z","timestamp":1787923070684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /img/coinbase_loading.webm HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: video/webm\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"6a6110da-1cda2f\"\r\nage: 323\r\ncontent-range: bytes 0-1890862/1890863\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a3xl4C9u13cG2VLC8u16%2BDTpoL6CUTEh3l4zikdzB62JmR7ScFzGqLRhCWiXMMEUhP%2Bpa6%2Bgasa0lKmJGopN9gYs05oLeyiBDcZ1Q%2FxsbxGaXdETVW8Tl958LDCjuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239937ce650b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1890863\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890863,"size_decoded":1891587,"mime_type":"video/webm","magic":"WebM","md5":"634de0231ce3b09ebffb511c8ea2c9c2","sha1":"eba4389f88d69a70d5bb42db6fc713839545a8a5","sha256":"9797bfc8d6d59e7cb346587cc6a6751bdc5c21008bf15c97f08234ccfb351e8c","sha512":"8df56a948ed9cccc38a16af866626320d733355ce5de8875d1ae87282e21efa2dca56c6f7edba987893e580de5b09b2acf98e82d0350d8cbcda0e554de1e316e","ssdeep":"24576:yckNbMrt1Zu9wtJ8fB7rbU/8KASz2IY9xD:ycq8Z/Gf90/7V2IEd","tlshash":"a125231452062fc3cc718ab1eb341b6f169f099692a2302c87a65994c40d7f6df6bddf","first_seen":"2025-10-16T19:40:17.764387Z","last_seen":"2026-08-28T13:18:35.022692Z","times_seen":59,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/favicon.svg","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:51.062Z","timestamp":1787923071062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: W/\"6a6110da-172\"\r\nexpires: Sat, 29 Aug 2026 13:12:27 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbCf7u621aqcGO4%2Bp77PMN4cfkUrzw9dLf1sKQ41hN9iEkV7%2Fm5IKtwKEFXdYn%2FhvzeYTvFP3VDq3cKEJYZ2hy%2F7iLhKYGJX1rlgDbG4JJFv7ilR5SkyUb9XzIr%2BOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a323993a2e8f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":1143,"mime_type":"image/svg+xml","magic":"data","md5":"65eeeb5a74383c13a354cac99edd9cb1","sha1":"3774f006e83bb140946e66c679f6d7bfa3129fd0","sha256":"e3b03c503449db8451ed11946c555aab25d7f3fc5f5e55721df8c644c4fb651c","sha512":"cedf8e6ded5c81092232831b0283634691e5c07f96f3149b838749b7b638c843b7782c3f0731058e779899f034eb87b90b123ff29bfed3b999cc470d8f1df531","ssdeep":"","tlshash":"93f0c067736c2fd0df386bf88c5417809724e691d6175406b909caa0580792391dc429","first_seen":"2026-05-21T11:33:54.666333Z","last_seen":"2026-08-28T13:18:35.023237Z","times_seen":3,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/js/bip39-seed-validation.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.360Z","timestamp":1787923070360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /js/bip39-seed-validation.js HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:50:04 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a6110dc-1767\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fss18bXYjqhIRk%2FNcYh1ep8YCSiaFwhrU2TUMyHSD1BKxwI3VTQ6ASF5fYnR%2B3CBpNRNCwul0mQ2ka5NCW9AJxCgipBecBgCyLXt6FCnVS9Can5JCtRKuXeKZgXJHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935ce550b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5991,"size_decoded":2253,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bdb160e5a882d8786e5fd91cb71eeed1","sha1":"7b25f8f73fbb92311c8cb7bbb10891acf2e4ca3a","sha256":"436932c798a74dab83ba4f02206e7a2df835403a5a487f3df5cfd692810a42b3","sha512":"58fa971fc9161988a17a5caaff40937511513240a4c984a5386d4f5a7b4d975220e72e5b11e61878e05ae37b7cd3c604cddc7ce1036502e3eb871f26651e64aa","ssdeep":"96:ycA/zZnYrqwAKuaxQhzoh96QAoQSfHMmjWSsWQumTJ6QCUyu+ZByIGGwy91xdq16:3A/zZnYrHAKuaxQFob6QAoQSfHMoWSsQ","tlshash":"5bc1b89a79e220555c6770bdaadfe04a75e00503440ced09395ca3c07f98afd96fabd8","first_seen":"2026-08-03T12:29:06.120906Z","last_seen":"2026-08-28T13:18:35.024263Z","times_seen":9,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/main.js","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.362Z","timestamp":1787923070362,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a6110da-13378e\"\r\nexpires: Sat, 29 Aug 2026 13:12:26 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mibox%2FyzFOvhsJ%2FEXNTIWXNlJ760gwEFRe2u4Se8y5qT25jDDTvHOr%2FaoBXkJn96J9ssEhLwTjDpqHZ0YlKPg6hQYbrQouBVVRd06YI9%2B0e%2BPGsz4T21XPeZl8DY5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239935ce560b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1259406,"size_decoded":450512,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7578)","md5":"2c9dc298db9bf8d9b6845cb19c469d32","sha1":"b2c8d7163c90336588d84c6ff4db8ceb953c99fb","sha256":"651dde858b01ff3eb2f46d6980ee8d462d8a0412520b32bcc01d1d7b49754c08","sha512":"71a2e26107d0b93e7d3f8b559396cc487ce301797dd2fcc921ddeb5b20364d0598384e09dcd70f843e04b0fa6222cb75b4f2a724cd0df3c38b5eb4c52421e7d6","ssdeep":"12288:MaIM7sFCelGVrWqNQ/rQxJkcEUM/rQxJkgqBpe+/u:MaIMbeUKrQxGzrQxGgApX/u","tlshash":"fb252bf023780e767087c29de7747ce76aaaad93d9874448b36e0ae45bc7cc8d947580","first_seen":"2026-08-28T13:13:11.548046Z","last_seen":"2026-08-28T13:18:35.027902Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/img/dark-2.mp4","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.682Z","timestamp":1787923070682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /img/dark-2.mp4 HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:50:02 GMT\r\npriority: u=4,i=?0\r\netag: \"6a6110da-44e96f\"\r\nage: 323\r\ncontent-range: bytes 0-4516206/4516207\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3hTgU5djmPLK71sIZJvYPuzHuDmQ2kzNGS4I9yoNXFvNwCvthvbKWmbqQk8oDCwlaXvq2YJjL9d%2Bf%2BmW4DlnnPI4qI%2F80MoKtabrKoC4p7Mmg%2BGt4IYXWIWnLG8RTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239937ce630b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4516207\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4516207,"size_decoded":4516930,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"fd8ae1eb8fe51e6cfcef70db70ffe6d6","sha1":"1b320b9d6a58ecbb4b6bc6be0cf3b5ee0e9a81f0","sha256":"b8db5d772864bc9e0d165b8ac2450fd40f6aebc5d050c1cf4645f10419ac95c6","sha512":"e15020471c5c37c6367d02cf37a5ff962d7c26f296fec79ae2bd8101eca056c69b8ac860eaa4d872deec31baaff6e9f546d2a72373d776c0be4fadc345b4508f","ssdeep":"24576:S1e+MoM9rxzXgtpHS6gG7PdcwiQaFaNme8+OJlXQzXF+B:S1A9VzXgtdS6gGzyiNmsclXQzXF+B","tlshash":"932533da01553593f00848f4a9a40e6f8acde531e8e80963b48cfbb9cb7335156ee7e5","first_seen":"2026-06-05T05:29:41.020339Z","last_seen":"2026-08-28T13:18:35.028844Z","times_seen":18,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opnesea.com/img/light-2.mp4","fqdn":"opnesea.com","domain":"opnesea.com","tld":"com"},"ip":{"addr":"172.67.164.249","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.683Z","timestamp":1787923070683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opnesea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 16:12:07 GMT","end":"Thu, 15 Oct 2026 17:10:37 GMT"},"fingerprint":{"sha1":"9D:BF:A4:8D:EC:60:BC:FE:C8:96:A7:10:86:04:B2:B9:A7:44:7F:CF","sha256":"8D:60:47:6A:E9:AE:41:32:88:51:11:08:13:19:78:07:59:7E:38:75:AC:A0:62:B8:37:10:19:D5:7F:8F:19:53"}}},"request":{"raw":"GET /img/light-2.mp4 HTTP/1.1\r\nHost: opnesea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 22 Jul 2026 18:50:04 GMT\r\npriority: u=4,i=?0\r\netag: \"6a6110dc-421563\"\r\nage: 323\r\ncontent-range: bytes 0-4330850/4330851\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BSgRoJFHQlI2Z8QnskG7QxyvWGMmyDdf%2B56ztcFFWlqHJ1huB9iACO4nhxuu7oszWhhwFFUA4CG7QSX0eeFPqiDy4wlHvzyl4nxcjYnO3Yi3s1drppCPiu7b6F2nEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3239937ce640b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4330851\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4330851,"size_decoded":4331568,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"c14f9dc187dee405ac7cebd092113c46","sha1":"aeca514bee983ed62ee9b7faa76f5d951f6a2d8a","sha256":"5d7ef1e1cfe680d373e3d4a25a7ddf26f710604c671c6d2f7ed09ac898ab9bb0","sha512":"03ba26a78b5c86af11fce1432f268493d8a7fd2f62a98b8633a016b9cee32425564f36be7159f52d7d40868c5d9ed3a9114961c9782f468ae731e857191e5b6c","ssdeep":"24576:nL8kzkQ7B1E/BPD7gihT9V3S0OBQdAVcGRSpqn6n2:njz/110BDMihTnkEacUSps6n2","tlshash":"9025336aeccca331eeb071318b7019c56900c8ff9b5ebd51708e9538af119293bd9697","first_seen":"2026-06-05T05:29:40.976738Z","last_seen":"2026-08-28T13:18:35.030533Z","times_seen":18,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"opnesea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opensea.io/icons/icon-192x192.png","fqdn":"opensea.io","domain":"opensea.io","tld":"io"},"ip":{"addr":"172.64.154.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:51.061Z","timestamp":1787923071061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opensea.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Aug 2026 17:46:44 GMT","end":"Sat, 31 Oct 2026 18:46:28 GMT"},"fingerprint":{"sha1":"7E:83:A4:3C:43:26:37:95:C4:84:FB:B8:77:EF:AF:36:D9:78:95:0A","sha256":"06:B6:77:9C:13:E6:F2:F9:FB:DE:FC:28:D5:E5:44:29:D0:FF:2C:CE:81:8F:99:3E:67:B3:0F:48:99:5F:CB:5B"}}},"request":{"raw":"GET /icons/icon-192x192.png HTTP/1.1\r\nHost: opensea.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 28 Aug 2026 13:17:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 2794\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon-192x192.png\"\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://os2-fqbf8.quill.run https://widget.intercom.io/widget/rws4jyr5 https://js.intercomcdn.com https://static.moonpay.com https://static.seadn.io/os2/tv_library/charting_library/ https://static.seadn.io/os2/trinkets/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.seadn.io/os2/tv_library/charting_library/; connect-src 'self' data: wss://gql.opensea.io wss://api.hyperliquid.xyz https://api.hyperliquid.xyz https://gql.opensea.io https://features.opensea.io https://static.seadn.io https://raw2.seadn.io https://i2.seadn.io https://i2c.seadn.io https://*.mux.com *.openseaprorelayproxy.com https://api.amplitude.com https://api2.amplitude.com https://sr-client-cfg.amplitude.com https://o406206.ingest.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com/ https://os2-fqbf8.quill.run https://api.mainnet.abs.xyz https://arb1.arbitrum.io/rpc https://nova.arbitrum.io/rpc https://eth.merkle.io https://api.avax.network/ext/bc/C/rpc https://api.avax-test.network/ext/bc/C/rpc https://rpc.blast.io https://56.rpc.thirdweb.com https://mainnet.evm.nodes.onflow.org https://public-en-cypress.klaytn.net https://polygon.drpc.org https://rpc-amoy.polygon.technology https://mainnet.base.org https://sepolia.base.org https://11155111.rpc.thirdweb.com https://rpc.zora.energy https://evm-rpc.sei-apis.com/ https://rpc.berachain.com https://api.roninchain.com/rpc https://rpc.soneium.org https://mainnet.shape.network https://mainnet.unichain.org/ https://mainnet-rpc.b3.fun/http https://rpc-proxy.opensea.io wss://rpc-proxy.opensea.io https://cloudflare-eth.com https://mainnet.infura.io https://*.llamarpc.com https://*.g.alchemy.com https://*.quiknode.pro https://rpc.monad.xyz https://rpc.hyperliquid.xyz/evm https://thrumming-blue-uranium.solana-mainnet.quiknode.pro wss://thrumming-blue-uranium.solana-mainnet.quiknode.pro https://rpc.gunzchain.io https://api.infra.mainnet.somnia.network https://auth-api.infra.mainnet.somnia.network https://swr.xnftdata.com/rpc-proxy/ https://mainnet.megaeth.com/rpc https://rpc-gel.inkonchain.com https://rpc-animechain-39xf6m45e3.t.conduit.xyz/ https://wallets.opensea.io/ https://www.walletlink.org wss://www.walletlink.org https://pulse.walletconnect.org https://api.web3modal.org wss://relay.walletconnect.org https://metamask-sdk.api.cx.metamask.io https://mm-sdk-analytics.api.cx.metamask.io wss://metamask-sdk.api.cx.metamask.io wss://mm-sdk-relay.api.cx.metamask.io https://chain-proxy.wallet.coinbase.com https://cca-lite.coinbase.com https://*.intercom.io https://*.intercomcdn.com https://*.intercomassets.com wss://*.intercom.io https://prod-mainnet-temp-uploads.s3.us-east-1.amazonaws.com https://api.moonpay.com https://moonpay.com https://auth.privy.io https://mainnet.block-engine.jito.wtf https://seadn-original-media.s3.us-east-1.amazonaws.com https://vitals.vercel-insights.com; img-src 'self' blob: data: https://opensea.io https://static.opensea.io https://2n6nitpvd2efqyty.public.blob.vercel-storage.com https://*.featurebase-attachments.com https://fb-usercontent.fra1.cdn.digitaloceanspaces.com https://static.seadn.io https://raw2.seadn.io https://i2.seadn.io https://i2c.seadn.io https://image.mux.com https://stream.mux.com https://*.canarytokens.org/ https://canarytokens.org/ https://*.intercomcdn.com https://*.intercomassets.com https://cdnjs.cloudflare.com/ajax/libs/twemoji/ https://cdn.prod.website-files.com https://media.veefriends.com/ https://i.ibb.co/ https://app.hyperliquid.xyz/coins/ https://pbs.twimg.com https://abs.twimg.com https://unavatar.io https://www.googletagmanager.com; media-src 'self' blob: data: https://raw2.seadn.io https://static.seadn.io https://i2.seadn.io https://i2c.seadn.io https://image.mux.com https://stream.mux.com; font-src 'self' https://fonts.gstatic.com https://static.seadn.io/os2/tv_library/charting_library/; object-src 'none'; base-uri 'self' https://static.seadn.io/os2/tv_library/charting_library/; form-action 'self'; frame-ancestors 'self' https://wallets.opensea.io/ https://privy.wallets.opensea.io; frame-src 'self' https://wallets.opensea.io/ https://privy.wallets.opensea.io https://auth.privy.io https://*.moonpay.com https://i2.seadn.io https://i2c.seadn.io https://static.seadn.io https: blob:; block-all-mixed-content; upgrade-insecure-requests;\r\ncross-origin-opener-policy: unsafe-none\r\netag: \"9a179fa5f32adfc0f7813356277760ae\"\r\nlast-modified: Fri, 28 Aug 2026 12:58:51 GMT\r\nreferrer-policy: strict-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: on\r\nx-frame-options: DENY\r\nx-matched-path: /icons/icon-192x192.png\r\nx-permitted-cross-domain-policies: none\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::5zd8r-1787923071118-03edf4bf3b0c\r\npriority: u=6,i=?0\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=3bMPLYB4fftrZwkEp_sNpjDH2cIktIENlshCtX_nY60-1787923071.085422-1.0.1.1-5PggESAaJFOPjPolA03XYwy_chTnXfJoeFrnM5KGSuJ0OPsL4qQQZ8fvw1PCEfZIHN0MU9txKKYmCTl3YXx6HZTzjBI.s9AOlKeZ.86Rqsrj.Ug8CL8ccaJHhuwWW_yJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=opensea.io; Expires=Fri, 28 Aug 2026 13:47:51 GMT\r\ncf-ray: a323993a48a356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3bMPLYB4fftrZwkEp_sNpjDH2cIktIENlshCtX_nY60-1787923071.085422-1.0.1.1-5PggESAaJFOPjPolA03XYwy_chTnXfJoeFrnM5KGSuJ0OPsL4qQQZ8fvw1PCEfZIHN0MU9txKKYmCTl3YXx6HZTzjBI.s9AOlKeZ.86Rqsrj.Ug8CL8ccaJHhuwWW_yJ","quoted":false,"path":"/","domain":"opensea.io","expires":"2026-08-28T13:47:51Z","raw_expires":"Fri, 28 Aug 2026 13:47:51 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3bMPLYB4fftrZwkEp_sNpjDH2cIktIENlshCtX_nY60-1787923071.085422-1.0.1.1-5PggESAaJFOPjPolA03XYwy_chTnXfJoeFrnM5KGSuJ0OPsL4qQQZ8fvw1PCEfZIHN0MU9txKKYmCTl3YXx6HZTzjBI.s9AOlKeZ.86Rqsrj.Ug8CL8ccaJHhuwWW_yJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=opensea.io; Expires=Fri, 28 Aug 2026 13:47:51 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2794,"size_decoded":8549,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"9a179fa5f32adfc0f7813356277760ae","sha1":"14f97daa1d2cdb2a1463e936d73984fb990f072c","sha256":"f137adca66a8c0fa4621d3cb45b08bf5e7840430a81bd1a9caf20936e2dcd5d2","sha512":"5b7c38d60ce09957e014570276c1e100b49673e0974706033799ed08b267ec3a116e590d6a8751d2be76d36bdd56f5d819eff05c838d2605b470c2b89122ed74","ssdeep":"","tlshash":"3b514b834b2b5d7a80af7a70fef59dda4409aa79320b59685c38ea11e43985060297f3","first_seen":"2025-05-06T11:57:27.200674Z","last_seen":"2026-08-28T13:18:35.033844Z","times_seen":151,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Geist:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opnesea.com/","date":"2026-08-28T13:17:50.353Z","timestamp":1787923070353,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Geist:ital,wght@0,100..900;1,100..900\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://opnesea.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 13:17:50 GMT\r\ndate: Fri, 28 Aug 2026 13:17:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8620,"size_decoded":1541,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be003e12380217c157f8033cab563395","sha1":"7240a535a23d5db32b6013736f797ad8c19abd37","sha256":"8a81465e2e2f6c85e5eb7e30277e003d08138a9a95f71f0712a84c76b6b62406","sha512":"a2683e531ad5c04cebbda868b300c0d07e06205b2b60b74629d50b0f3f9faad0c212c5c2fd90c082e51e614c18d5cbe7b2a368328d8e12f351a311c2dcca5865","ssdeep":"192:dyfNyoSykyuryitfJWktFrywfydyGy63gy/yFVyR73xpmj3U8fHN:dkNhSpF5hftfcHjg8ciI9","tlshash":"ed02dc92046b9104ea431cc237cf7e32ae8e91556081d2be7ffd1dd9aceac22136875c","first_seen":"2026-06-05T05:29:41.036902Z","last_seen":"2026-08-28T13:18:35.035083Z","times_seen":16,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
