{"report_id":"673a261f-337f-456b-a56a-ec29888a00a7","version":6,"status":"done","tags":[],"date":"2025-10-22T11:34:20Z","url":{"schema":"http","addr":"okweb3dq.com","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"104.21.4.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"okweb3dq.com/pc/#/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"title":"Web3FTK"},"submit":{"url":{"schema":"http","addr":"okweb3dq.com","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"104.21.4.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-26T11:34:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"okweb3dq.com","ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-08","domain_rank":0,"first_seen":"2025-10-22T11:34:23.466616Z","last_seen":"2025-10-22T11:34:23.466617Z","alert_count":39,"request_count":39,"received_data":4712890,"sent_data":17630,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}]},{"fqdn":"web3ftk.shop","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-22T11:34:23.462507Z","last_seen":"2025-10-22T11:34:23.462507Z","alert_count":0,"request_count":9,"received_data":0,"sent_data":4977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.web3ftk.shop","ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":12,"received_data":353428,"sent_data":5804,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"okweb3dq.com/pc/#/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fcaea4b8885ca5c1fb3ddd5c490da5c6","sha1":"35745f87b37210d992a9ed534a593ae500b7adaa","sha256":"934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272","sha512":"65e3bda5b8bd909b2fed0a25e3d6d3d7d2984601de4a906783c783097fcd8902ea1c2fa05d33619126415bc5000a72e8459eb81c971a85e2ddb374f9fd9231aa","ssdeep":"","tlshash":"889002c520d965518ad321a061261a46615a04f914a48c5091589c56287303092695bc","size":54,"data":"","first_seen":"2023-04-12T08:25:39Z","last_seen":"2026-08-06T05:20:43.248931Z","times_seen":26066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"554ccc7944449a6983c83a1c1e7b0dfa","sha1":"23fa601831f477b7653dbe201e7faa591f8cba5d","sha256":"4bbd6c91c2ae6b71d4866558b30e1b2842cf0194fb04ec91698086ac53e16476","sha512":"2e7e48ba4deff540475ffaa6137682f3f07bc2920f56c81e21831bb5ca50e1ec387d2bb6405f38e60c445a98a1424049349c9313a18a34c7c2877e6fb6e35f86","ssdeep":"","tlshash":"f15191ba1410009255b3a02c166f67847b14aba75d45f841b69e437c2f1dd2f6af3bce","size":3024,"data":"","first_seen":"2025-10-22T11:34:37.763839Z","last_seen":"2025-10-22T11:34:37.763839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/swiper.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"317fd00903b68a157500b40495e8d74e","sha1":"29ba73703d5c1d5390551e9fb230a3f1ace1437e","sha256":"efac6fec2ba437b6a906e249fad9de3c7d3c105a48136b0155376b5989c4d76a","sha512":"5e52793b157e7f7c09706c201dfd351a8941dc0bf723afa015c09ec1c815210adb759e4ce440dca16df43eed777006e898b2a7bb2f2ecf79c5db96e398759424","ssdeep":"1536:OL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWql:1pbUAxSqBohgZu7HgZsUOUFBWqjxJx","tlshash":"24c3094eb390619510e36257529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","size":122735,"data":"","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-08-06T06:18:23.594555Z","times_seen":6365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/0.69600d59f8f4d2ec1214.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"35e1febb459e04528d591e2c30c65da8","sha1":"57c22f52e59ee42101f8ce515e1ee38da37f638f","sha256":"4d6b3d4e198230f246c5dbad4f31019e24abdf6bcc085b80c5766ce89e6bc520","sha512":"4da299ec183001cd036e433b7515879a9e91514468db466c6b70eaaf8122fe7b4fe458ad13781b27a7f412cee9236c18ccb1498baf8e283d249f37e37aacd508","ssdeep":"3072:DDoN3O/2gJdDkpGBkhiTdQx3ZNfDG3tj6NTK2k+:DDqO/2gJdDkCkhiSFZB0d6Mo","tlshash":"99045c19b083b5b988ab5061502f2519f1712b98b50ac0a6f738cce56df4da9332ff7d","size":180401,"data":"","first_seen":"2025-10-22T11:34:37.658209Z","last_seen":"2025-10-22T11:34:37.658209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/app.2c352f6d2a672ad628ab.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d32c9aa5b731873bb274c18e768dca62","sha1":"38872bcdd81cfdd14351e3e052b179c351f351cc","sha256":"a2d074f1bd9352d7426a3c9a229ec59508f29cada720de7676b48d459e4b9d82","sha512":"7d8ba470ea6534613a9760d20d018a052233180280ab6be9246af112b1b700bba794396e6118720419c73e6824a474034108de5262ea02837c819e3eac7d8741","ssdeep":"6144:dWxFcosfQ0Ea9pViyqjDhs4nspgrFf+N8JwaynMlRzANpiqj7azuiDxEMo5RD63v:dHE+pIyCs4ge5+N8OaynMlRzANpiqj7q","tlshash":"28844b3b11ce699819425612358b7a49b69d9cc6fb93e4e049cdc62932f076dc03eff2","size":384515,"data":"","first_seen":"2025-10-22T11:34:37.766408Z","last_seen":"2025-10-22T11:34:37.766408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffed8bcc0af9db588e19127393f38aca","sha1":"5d7c37579a895c795e3b99e538bc21acab7d810f","sha256":"8b8d3e2917ea726f9bef63e6d089db0d83d275bf909b3e93cd816f053a43fc0a","sha512":"70557f07558317fd46f1186df5a4df6b4d53fc65c09b316af37f4cd914248d12c6d6c66fb3ef88f88236f14739b30ee86d892baa70f025ee59c668c66fccdf6e","ssdeep":"192:x5C5b4QNokiNLw0mrZA3KoluxV68ksmZ15UPQ0wx9Z4ESjxLhFZvL:/G1gsr7idsirPCESjxLhP","tlshash":"c1127488f7e0b46243a370b4917f550fb2b52925658e41b8f260d8ea6cfd04d962bf7c","size":9697,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.524306Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c356bdc37296546bfde0acb3327ce305","sha1":"e5073d9fcd7820ee78cad1dbec5ecb5943bbb349","sha256":"bac505309e80d1ba3bf808a88e92ff2352bca9414e499ac8c68534d5dd276d33","sha512":"ad67bbf55927bc36b37f161724ef1a164b06711b5b2e86ee18add9bd7e613c73606fa62823635253587640de1915a236c226b0008361dec7fd426e57285ee52e","ssdeep":"192:Nge0jAoNzmAHSq7KhHcA1rQ1S2ZOAZXR0zA1GCL1G9U4jUs+f1gmUiC+xUv+4R5T:Nge0jAoNzmAHZWNASZNVziC924HAAVMY","tlshash":"c252a5da7611302142936032e87f2407913aba16688a903c71c9edde5efdb1deb17f39","size":13418,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.508613Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/manifest.9d63956e24dd244b3be3.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffd0bde2cf0405b193d2e0b99dd3124b","sha1":"cbde3b1bfeb3c2f4a61a82166b0cf4612e797a42","sha256":"ec20e45a9377d1db8da248524b25f55cbe116d4a84393192fdc562527cf0ac83","sha512":"1e4d78ea13d71ff2a84943622e423c57bff40bd9fe16222377e95c118a53594480547d9e4ba197916c6011a0d1c3c02911e829cbe1107c89b2a088e542dc72d7","ssdeep":"","tlshash":"f4510ae7777cb9d676f60864473ba3a8a03c35117d2cd880d2ddd1ab2c32d4056239e6","size":3145,"data":"","first_seen":"2025-10-22T11:34:37.711886Z","last_seen":"2025-10-22T11:34:37.711886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/w3model.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4153df34a169528cb7700599729e4f3d","sha1":"651b52687df43f35abd83144316889a779d44d53","sha256":"307c8d1e1dfd779590af55ca0709e90e76647b3bdc6056616f9911d6611e3473","sha512":"a62e4f9e12ae1bd9b78a4beb0cc9b27cf289bf55b11eb573cc51805ff0dec5603f40704d7a0f036cdd3bd903bde12062351bfdfeefad643c0afbc58c6b8c7b49","ssdeep":"6144:aDTdrcjrE/0NNWS9UO2/HE2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vqd:WTdgDEzaneYZEl5+qQ8zztN8d","tlshash":"0d94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5a8f84aa913bff9","size":428802,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-03-21T15:52:34.954936Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/web3model.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"365c80971c9efc3f3e8087fc703f7667","sha1":"de6bd2aadd0984751888f6f59fdc81102e2f816d","sha256":"a4cd4c5feca9f7333052edb99312a899313e1f3f6b8f34ab7f8dcf01fe8d7a74","sha512":"f9470f1d189a597a3588b476b3efdcf97823dd0c87411f60607b641525c52605a7a2550f38337e50869a837fc1d6acf9029d5d17f66050fa94fbadf5b5feeeed","ssdeep":"6144:l76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:56d9DZzaneYZEl5+qQ8zztN85","tlshash":"6c94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","size":430089,"data":"","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-27T13:45:14.751184Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/1.a70c3395957c41b259d7.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c94d8161265a832ca9c55d01f710f2a","sha1":"e23b93e011f710bab3e77f17789970787fcebc4b","sha256":"6074670fc72603c1ba3176e0c32333d74b3143be9eab86148a0e71041fbdc431","sha512":"d04118497724c2e4f855708c4dc1ec167d0a0c43229455d9b7eb4a1c16da48d815bbcbeee70912b70b913f805cafed22a4459d021364cda4326a56eb9237f814","ssdeep":"1536:6S4pOx268H3V4H0dwj+JvFYttFAa8Ag3tTjXscFoqbYcZ:4sxQXGHSGtU3tTjcW","tlshash":"7743af1bb89b336f88394051413a6929f8372ecc952ad097f92ce9d4c5f5d39261fa3c","size":60146,"data":"","first_seen":"2025-10-22T11:34:37.713461Z","last_seen":"2025-10-22T11:34:37.713461Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/charting_library/charting_library.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b40dcdd638760f8051c1beb4963fd0c","sha1":"e24b3841ff36373ce7366055eca40e479886dd4f","sha256":"283ed6337112f2cae0dcb51a26326dad7e09c03b8699dbad441cf7c5ba35965c","sha512":"43e207cc06b5b0d6e9a5fc24052822e16538feed91d07f06f70d8f546fbfeeb63687f707ff0f2d54b57a9d6286bc2fed211b6a83fb604dc86227c9914c7a6c37","ssdeep":"192:9faWSo7kjFU8oBelr6lw2rfnzKIQPlaF1iJ7K+Ei/ISJhvHIheu5Ph3Ffa5:0WS2kjFU8oIlD2rfn2I5iNK+5/ISJhvB","tlshash":"93224058ed247c720acb40f0427f190f8239e678d84944ed3c84e6ec59fd44a6a6fbb8","size":10607,"data":"","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.49869Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/jquery-3.4.1.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-06T03:43:44.97615Z","times_seen":7412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/country.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c74b5f155803aed2d7eeb507be5b72c","sha1":"41869ae30e996e32b809c2b7a4109c28f8f997c5","sha256":"fe00224aa91c5edc0295a74b219549cfabb98e753bdfad6a459ec155306311d4","sha512":"ea273a76cdf4b5d11795d00cf15a1642940415717892bb47ebddb4784f2479cd2920fc831096d506b7ca73cbf9ba70c4f6793e3ac3e8e1c93e0ca54739b2e818","ssdeep":"768:gcPm+K3DkdqvCJV3Woq+V04nDVnFz29JGPV/cBE9j:UMm4nDVndNcBu","tlshash":"ce13fe19d1ba4cb769adc42a70b6729048046b67ce603ac437ec735d4fad62f053a3bd","size":42290,"data":"","first_seen":"2025-03-08T09:36:57.835999Z","last_seen":"2026-03-08T22:06:26.40901Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/vendor.cc9d8cde26625aac9ecd.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c170d22118151dfbe07df1ff0ca15366","sha1":"4cb13a2bb9476cdc3670c17e5f36383881c0d2db","sha256":"6b6a6e8e658f448c1c7b16076327844736fabaab0e080bde0f8ceee066e2d28f","sha512":"33536ded3993b050081cf991e25828fc6c3bd0a55bab7f907f2fe295dc1037170a91f9b584e98dd11242f40acac19d304e0d5a172699101be57e867567df4525","ssdeep":"49152:IH4KZoNRm5Pzk2JaZX0BBL2JXzdUimRH2vDW:eLo0W7UpH2K","tlshash":"2d852b9d32c4b46247e321b5503f240ba3372958a80ac458ba75d4daacbd94e633ff7d","size":1784080,"data":"","first_seen":"2025-10-22T11:34:37.775501Z","last_seen":"2025-10-22T11:34:37.775501Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/#/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"554ccc7944449a6983c83a1c1e7b0dfa","sha1":"23fa601831f477b7653dbe201e7faa591f8cba5d","sha256":"4bbd6c91c2ae6b71d4866558b30e1b2842cf0194fb04ec91698086ac53e16476","sha512":"2e7e48ba4deff540475ffaa6137682f3f07bc2920f56c81e21831bb5ca50e1ec387d2bb6405f38e60c445a98a1424049349c9313a18a34c7c2877e6fb6e35f86","ssdeep":"","tlshash":"f15191ba1410009255b3a02c166f67847b14aba75d45f841b69e437c2f1dd2f6af3bce","size":3024,"data":"","first_seen":"2025-10-22T11:34:37.763839Z","last_seen":"2025-10-22T11:34:37.763839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/w01.4f1486a.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/w01.4f1486a.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 17373\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-43dd\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sr5uTrnghxD1%2BR%2BaTAFJ0txDN3fOjG6jeI5Ucj9uJBQ7uEFNumqXE3xO18EpCjO2iu824n%2FglAY5VQMeoMNGRxc0j77KaZ%2FeoAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6a9fa0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17373,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"4f1486ae455feaea998df3e9e19e6ea5","sha1":"cd50a8f6baff2870738b6a26a26f47125ba3ed71","sha256":"e43c1bc6c795aa65c11b685e949c9ff4d47308d7c109be0ba2341eda8a522832","sha512":"99d2009101c8186e836184c68a314b609c23e51584894fd011465da38e5c8f280c7a635f5b515157388d2ef063e24350d4d4ee507b078cade7e42e2e068c909f","ssdeep":"384:M8yxRIgAewKCg9gwL4a54LVl/a3pJVbCwhymm8eRZ+D:Mqg+K8QWm7CwE7pID","tlshash":"ae72e1daf2a45216d02566c5aaefcf43411b6cc4c35acb63fd8744986f8607883476cb","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.556695Z","times_seen":2,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.080Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: JHS7Iv95Mt/o/Yzlrks9ng==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":0,"dns":1,"connect":162,"send":0,"wait":0,"receive":0,"ssl":181},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/app.2c352f6d2a672ad628ab.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/app.2c352f6d2a672ad628ab.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-5de03\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65C2jAP484a2fBK1DrvYFEvkuFcpmA5sOLf2I%2BYzN0w1HzUpnjDNuh3F2JGyDwEcGkYfXSw5Ob950CE77bAZ4FyK7qTi5iP%2BNx4%3D\"}]}\r\ncf-ray: 9928aed239380b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384515,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54491), with NEL line terminators","md5":"0765e994d04c5e3ee10ffd2690b61ea2","sha1":"fffd16f445321aaf193ef0e16ed1053e4fc55aab","sha256":"8a65cb15927ae4e7ebeed539127acffbc97a1541042372a31dae6ef097ba1ee5","sha512":"758a89bc80fec968eb7eb1f755225afea102eb60d2faae7b320c9a07462b22d3d412916f428d3f5a23a7971bd689b0a5bc4ea80b210f5b369eac137349e73590","ssdeep":"12288:dHE+DyWLge5+N8OaynMlRzANpiqj7azNDxEMo5RD632Za3:d7uWLeZg","tlshash":"a0942a93418fc7961ac195a838467744b6fcd8c7fb8ae4d40bc9cde836f4a24901eee1","first_seen":"2025-10-22T11:34:37.598171Z","last_seen":"2025-10-22T11:34:37.598171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":615,"receive":604,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/logo/home_logo.png?v=3","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:01.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/logo/home_logo.png?v=3 HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 776\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-308\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wm%2FWhxBxeldh1ad6llVtmz7AwQo4kp2X2F3z3%2FvjE%2FxMxPptLy1vzWlMw3q4Kbkhj2SWmVNSUUqog8YVknFrscU1vVypTG%2FKr9M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee649ee0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 156 x 60, 8-bit colormap, non-interlaced","md5":"2d4cf55f1c1a3bdbb7d0cffd795528bc","sha1":"98d81ca0f1def9a77649326b642c047cbc2301c8","sha256":"16338ad1f419fecefba497bc6f3d67ea0035e815c6e591980d62b944e5a5dd17","sha512":"33a7570fc7206091b9d8eb009f13214ddb630e176069b8f2ff691dd8ca8a49b46b8d3eb8bc6181a4e71b2f043bc316dfb3902e296d97201c041b27ffed5542e5","ssdeep":"","tlshash":"3b0165d32991df44833a353a1d19010942970eee709b5a3e634abca80bb8196d7b6747","first_seen":"2025-10-22T11:34:37.60857Z","last_seen":"2025-10-22T11:34:37.60857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":598,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getmarketList?lang=en\u0026rtoken=6RmXVWCpQ6UBstQ6\u0026id=1\u0026type=2\u0026limit=100","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getmarketList?lang=en\u0026rtoken=6RmXVWCpQ6UBstQ6\u0026id=1\u0026type=2\u0026limit=100 HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1964,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"34c2e6ce4b5dad379c3581af17b3c394","sha1":"a35bc80178e315a6c1686c2b435ac230bfbd14f2","sha256":"25a02bdc09a9a6d390429c6fd722016a6dc07812a7cf1e3dcb20dbaefdba27d6","sha512":"1b5876830f29bef18ae7722934e172c3045ca5bf168be5a391324622bbdaba9b4ebbfaa1190253cf458c05734a4a6507e99ae83159345a5b5b87ac4a2247f8ca","ssdeep":"","tlshash":"32417b7f21d48ee4f2324ce59786552d706eb84d5ee0cf8583ed5ac40094562fc36bab","first_seen":"2025-10-22T11:34:37.612044Z","last_seen":"2025-10-22T11:34:37.612044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/uploads/6880e1211a358.jpg","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /uploads/6880e1211a358.jpg HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 109260\r\nlast-modified: Wed, 23 Jul 2025 13:18:25 GMT\r\netag: \"6880e121-1aacc\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":109260,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:08:11 10:06:39], progressive, precision 8, 1024x406, components 3","md5":"0b81a89201518bad4099013cae963991","sha1":"b02d90623ef1431ada4e2117f3aeb53a6689820c","sha256":"e59fbbe3356e9a5d08e186eb46e8c0079df462d1fd101657e0dd18ef613950ef","sha512":"60a3783b8191211fa275058cae52f142413fbf1772a36581bb123abe69bc4a05ee1f561691c60d12a986dff1f354e286c28cd1511982c112422eb7ab2499eb06","ssdeep":"1536:sBn/wXPvhSRT0peyTYyb4GlgQC9bOX2ABU1y+SRtN2DyGzp62P5OObOJM:Y/8Pvzey1FmQsbOG51yL2bzhPOa","tlshash":"0eb3011afe315b72f1dc2834856addab4f328ba62697450df8cc64273ba09725c9dc0d","first_seen":"2025-10-22T11:34:37.61616Z","last_seen":"2025-10-22T11:34:37.61616Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:03.370Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zw4aTI09dNZ6Yrs5icowEg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":1,"connect":160,"send":0,"wait":0,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/jquery-3.4.1.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/jquery-3.4.1.min.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-15851\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C2ZVV8pqFFbddvC%2ByIvlwkO5c59c%2FH598bFVsMcu0txKo%2FLCEk4hAZEgkZA3jcmNzALGenMLCSz1Asw7UeSSg%2F3dxsg89BjfLwk%3D\"}]}\r\ncf-ray: 9928aed2192b0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators","md5":"2f772fed444d5489079f275bd01e26cc","sha1":"a8927ac2830b2fdd4a729eb0eb7f80923539ceb9","sha256":"2b381363dda049f2d49a59037b228bc865d51ffb977c8f5c3547d5c28de48e3a","sha512":"81f3b4d35aaa98af19a4d31ee5399d49e0f70ce52aadefffbf42c6c4489d9d50a49450eec8e9139a009da82b57bf677665a926d5ae913dfc4c74baeec186c422","ssdeep":"1536:jTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPmw:jgZm0H5HO5+gCKWZyPmHQ47GKc","tlshash":"8f8319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:42Z","last_seen":"2026-08-06T03:43:44.97615Z","times_seen":7412,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/remind.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/remind.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 319159\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-4deb7\"\r\nexpires: Fri, 21 Nov 2025 11:33:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JSr7xyoN5PzYCvNwdaqq7hH71Vt%2BBy7CXiSh80s7dcfw73Sscdko35NIEtMNE3AnNMGy5eoa3JvR7xv1ggDeF2tjzC7vx8QHkF4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aed229350b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":319159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2163 x 2283, 8-bit/color RGBA, non-interlaced","md5":"42a3301ec37986141e520b49d598e73b","sha1":"83c6e41ecfc381ef9d39dc5767272ea843e0a679","sha256":"60ddd3846aa5aaa641439a451b27834bdf41fabcf4601ed9c9239908dc5a6339","sha512":"db3eae8a9caf09de6f41e3ab079844691df7372295aabdcda662b6d042e07e707d1e8ad786c42b9eb4d0c8c5b5156039c1fc389df26b0a1230a793fb153d7b38","ssdeep":"6144:UT+B9YsJyUqYWWLq7M6jzqhyWykRcTUEWPaG/4Jb6lHGKYT:SAYCz1ZhyW9RJEKaG/Qb6lG","tlshash":"58642351da3dcc5ac5fb9635043f212ea9b84330b698fad6ca3f75501b42ca76227db0","first_seen":"2023-05-25T13:54:34Z","last_seen":"2026-07-04T00:32:49.531791Z","times_seen":91,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":762,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getLogo?lang=en\u0026rtoken=npl8FWAbqIp\u0026key=web_footer_logo","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getLogo?lang=en\u0026rtoken=npl8FWAbqIp\u0026key=web_footer_logo HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d42f2eb09907b9a425525edde4ae09b4","sha1":"11977ab9cf46d92496b3312af39f52f39dd1426b","sha256":"b66a77d4415c5bb9b91374de93f6021c0a33637cf20f09d38e1fc1754c520bdb","sha512":"4d77ae5b15e30ce445b0df91934c405e6feaa974fd1fa0d099b04f9105f86c2de713f3085747bf7afb1951777d9cbb84333a39461f768ab0bffe580bae74aa7d","ssdeep":"","tlshash":"a4c09b733bc45644a7055296595e3cc4965d26d349007559cd4cde54ca175343707632","first_seen":"2025-10-22T11:34:37.6248Z","last_seen":"2025-10-22T11:34:37.6248Z","times_seen":1,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":372,"dns":41,"connect":164,"send":0,"wait":208,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getBanner?lang=en\u0026rtoken=Qqa9Ty3Q","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getBanner?lang=en\u0026rtoken=Qqa9Ty3Q HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"32d7f0f74477cdbe40882ea7e242f215","sha1":"ce1b6a589f1058fd7544c6f71705000234600a71","sha256":"793f8805dad42c8bbeb9964b40327eeba52b917b1f8c7e25a2684a81868f5cbb","sha512":"34783ab3414d21e6ee4597f7af94bc0f481e9ce90e9ccffb0f3e5eed6d43c2af056f9c63782a4dd01d040c70236f63b9f6ef3ccf28679a1719a266b0dfad2de0","ssdeep":"","tlshash":"aaf027332db4a417abc081d2440b3c88a9cd1a579f08055cd2cf8e9c84997a083170b3","first_seen":"2025-10-22T11:34:37.627546Z","last_seen":"2025-10-22T11:34:37.627546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1064,"timings":{"blocked":372,"dns":38,"connect":164,"send":0,"wait":307,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/w03.9a10231.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/w03.9a10231.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 21366\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-5376\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6spqqecR%2FB8J40t33RsAO%2Bzp1iShFeiFwsqUq8RgnCfYCjPPFCS7kCoh5lKJzmVsFBG7XeVi3Hhz3yr0Sye%2FrZ%2F7GkPDZJzoqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6b9fc0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21366,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 147 x 120, 8-bit/color RGBA, non-interlaced","md5":"9a102315947e6a0960d1543b9e107e65","sha1":"17ddac9a32a7ad99580026091ab4073a04d2d865","sha256":"8edf895ce5d2990ee3d7760536c74e2046c3a2fcb7ecb7243fdcf79e02728d12","sha512":"13b60c1865ffc550ae048884be6f0537bbecd93a786be20cc216115f15f71052d16ba96a8a7f6549203d1e176f1e192eff005c70249142bc833a8b83a17a161f","ssdeep":"384:CTHCQzj4LB3LrFx72rzBdX0/mUq2k60pm9yULlzrPMusLnLR2hQY2R:CTlHo7rr4b0m4kP0MULNPPsDNR","tlshash":"dea2e1adb5c67090735cfa825fc164aa341336006952dca6fd8f081b0f76af9c1e59db","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.633342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":738,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/banner.4b82dbb.jpg","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/banner.4b82dbb.jpg HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/static/css/app.1f58ddf696b180b3188a467e612b9ba6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28686\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-700e\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ma8y6cOkEhxVC4cJWlncoA8cjO0Pe%2BhUc10okNdA5cCbJTYrpkDa4KAp%2FHLGXzep3AvKEpmkgoBBMYp%2FDz%2FtWlu6U6s4FpO6ANE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6d9fe0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28686,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x640, components 3","md5":"4b82dbb5b1db778abc113789e373b872","sha1":"8a2561a021cc8fec534ff7b07ca2f79a9a633bda","sha256":"ff7c9be4f67f89985ef58f7c5e53e176980ffd75528fb4214c86c2e5017aedae","sha512":"26e2fad5b0b1a7e964c99dad16ef6e6b69e046b23022b0b44156a4e67cbe051f1fcd536365b4891ebe88edda2a6ef91ba6a586b9e92718903a0588afe5a8ca1d","ssdeep":"384:/GYbE52YJsH8v1WGmOFOQztI707e0WDOp9hEOjSPEjaBn6sUYH0vgprhwg:/g52YHWJEOwB/EOmse5sgplB","tlshash":"7ad2af3b93455b42c68ac6765cfb8b333e2141a897f6d567b2b1ec2849943f1bc9c0c4","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.639603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":209,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/w02.e6970bb.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/w02.e6970bb.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 11052\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-2b2c\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8mpZlYoXmQQCfjSLyA6oaqgQ4auGwucVqNN35f1M0SWxQIn85Rj51OvTNaN86UbMReXTflrWOdkU1ic5m6rX1mh0mc7J1ndIXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6a9fb0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"e6970bb6ac25ac38880693dcedbd7a5e","sha1":"d88c2f5775ba482551465d30de82b4b94b5ede3b","sha256":"15c8a00f99264bd4aa9c2ad90d560a16be89a811b5bdf1ec9dded24bd3026ee3","sha512":"32c16fb53242b2a66da9b0e3543635b9b787756effe80ba4cb5b564e821e2f0473b9328d87e29308ab15b1c82f7fa7b09dad37b62737e0666efdae9cb19325f5","ssdeep":"192:MgGeUZxBK4dVKCW2b6btHmCoc4rKRksAOSbrtD6To2vxuS6QtR/K:M8UZnKSp4td4+Wst6152vxnpb/K","tlshash":"0d32cf97cd28b9199008fe283ef118c4cd97434ccdd0a48abe8b4916046b73dc7d99ee","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.651087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":564,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/assets/new/dbox.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /assets/new/dbox.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aL6%2Br7cQYBpBUFmgiGc7fyzmrcVhSxf1hDCj%2BLAsPN9BV4qbimdHs9ZhMMRMfXdhEJ%2Bs%2FOJaZLKiHBZ0CBm6di7KEuksjFS9iKY%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6da000b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-06T06:48:03.801578Z","times_seen":546806,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:14.993Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5P8fF4sIB+cBbkyrjVmSdw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":1,"connect":164,"send":0,"wait":0,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/w3model.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/w3model.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-68b02\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihAaf1zYKAi0epPNtdpE5wCuukuLk8dBSwsd40rSvEDXzXkWNd43DBT4cezvbmSc%2BRYW4%2FMDp7lXMr3scPZNyx75VZ%2B%2BrEay5zQ%3D\"}]}\r\ncf-ray: 9928aed2192c0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428802,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62540)","md5":"4153df34a169528cb7700599729e4f3d","sha1":"651b52687df43f35abd83144316889a779d44d53","sha256":"307c8d1e1dfd779590af55ca0709e90e76647b3bdc6056616f9911d6611e3473","sha512":"a62e4f9e12ae1bd9b78a4beb0cc9b27cf289bf55b11eb573cc51805ff0dec5603f40704d7a0f036cdd3bd903bde12062351bfdfeefad643c0afbc58c6b8c7b49","ssdeep":"6144:aDTdrcjrE/0NNWS9UO2/HE2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vqd:WTdgDEzaneYZEl5+qQ8zztN8d","tlshash":"0d94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5a8f84aa913bff9","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-03-21T15:52:34.954936Z","times_seen":28,"resource_available":true,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":735,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/swiper.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/swiper.min.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-1df6f\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Q1fYmKWCNwvVk6CAl1qjl2rf6O3niCOGOHmLfW3MfILreKXuWmccQRFG7ULH8OQxs9Bc39qBrPk82dl5rm2RgOVWHvTz9MsNjs%3D\"}]}\r\ncf-ray: 9928aed2292e0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122735,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65275)","md5":"317fd00903b68a157500b40495e8d74e","sha1":"29ba73703d5c1d5390551e9fb230a3f1ace1437e","sha256":"efac6fec2ba437b6a906e249fad9de3c7d3c105a48136b0155376b5989c4d76a","sha512":"5e52793b157e7f7c09706c201dfd351a8941dc0bf723afa015c09ec1c815210adb759e4ce440dca16df43eed777006e898b2a7bb2f2ecf79c5db96e398759424","ssdeep":"1536:OL2qg0G1fVLJW4bU98IA9SK8FDliAfKrGny55T1s53V7gZxj8rvHgZsUOUBDBWql:1pbUAxSqBohgZu7HgZsUOUFBWqjxJx","tlshash":"24c3094eb390619510e36257529e9241a3b72849780ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-08-06T06:18:23.594555Z","times_seen":6365,"resource_available":true,"data":null}},"time_used":940,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/0.69600d59f8f4d2ec1214.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:00.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/0.69600d59f8f4d2ec1214.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-2c0b1\"\r\nexpires: Wed, 22 Oct 2025 23:34:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGmTsv6c2kOTpCaylaFBCferJeqnf5cawCBqJVXLGNLFa%2BgjmF6a1Rm8sM7Ek1LMaZQ7QYSnszp%2BXAdJJga2sJbFiaSmPRsPoqA%3D\"}]}\r\ncf-ray: 9928aedf99b20b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180401,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"35e1febb459e04528d591e2c30c65da8","sha1":"57c22f52e59ee42101f8ce515e1ee38da37f638f","sha256":"4d6b3d4e198230f246c5dbad4f31019e24abdf6bcc085b80c5766ce89e6bc520","sha512":"4da299ec183001cd036e433b7515879a9e91514468db466c6b70eaaf8122fe7b4fe458ad13781b27a7f412cee9236c18ccb1498baf8e283d249f37e37aacd508","ssdeep":"3072:DDoN3O/2gJdDkpGBkhiTdQx3ZNfDG3tj6NTK2k+:DDqO/2gJdDkCkhiSFZB0d6Mo","tlshash":"99045c19b083b5b988ab5061502f2519f1712b98b50ac0a6f738cce56df4da9332ff7d","first_seen":"2025-10-22T11:34:37.658209Z","last_seen":"2025-10-22T11:34:37.658209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/zh_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/zh_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1533\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-5fd\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuTKQHWRdIi5G0c7ArY5gMnkbiCDbRn%2B8WZqvMMIiMvFDdClTvmjR66lSqz3X4mJry2vhxNnbOrk01i7Bp0UpD3tYvpekwOLAtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee699f70b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 4-bit colormap, non-interlaced","md5":"1ff923867f2ed59abdcb01f6453ab961","sha1":"acdc03161b920fe5ccbab2c41047c638e55dca07","sha256":"db707cd7aaa0aa0455367cf3975decf86ad30e6b5756ca8f07366e97283fd227","sha512":"7eeff62c90f8e20e92060b368bc853b50b1b7bbf3ecc53faba50de28370112f5e4a8f5a3f7222dd9c191929b8e611cd0ade29afdd20c0413cea0653f4579cd78","ssdeep":"","tlshash":"5a31d7d38b3ba23d80a61c5190b5942a0dedc9ea344bca8fa8a041f508b06a7c7665d4","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.661513Z","times_seen":12,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getQrcode?lang=en\u0026rtoken=8vfxCUpUUKPx2wrK","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getQrcode?lang=en\u0026rtoken=8vfxCUpUUKPx2wrK HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c148a6107c634233969c59ee12a356a4","sha1":"4ba8f1ea9a5a6b7ef61b50659fe809499f73ce31","sha256":"0b71d5cdae0fb7bfa65ea9aefc07ef83f0970dfd42b5d514c4809a44b30ed98b","sha512":"577ae51f3b9253179b76a94b802492460f38520a5720c409de44b041567cd76de7714ea2ed873182fe83074a17671bdafce4288f022a745b024ac53bca85ce37","ssdeep":"","tlshash":"67e0cd717dd40744767511c1251f3cd5dadd16534590306dcf444ba088151262107f73","first_seen":"2025-10-22T11:34:37.667232Z","last_seen":"2025-10-22T11:34:37.667232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":372,"dns":37,"connect":173,"send":0,"wait":305,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/hy_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/hy_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2315\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-90b\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnLK4tI5eg4V0VCissursUoW3UGIzIs3fhdRlg%2BbGEkEa1qHO9h5Iz60WPZWuEQZ%2FcABbyqK4%2FvDobzpY7yeLEhl3wpks772fKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee689f40b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 8-bit colormap, non-interlaced","md5":"0302cd88c6cad704e7d25bda2a75cdd8","sha1":"8345b841b6fcc5112dbb0ea55745373624dbb196","sha256":"533169224aa4a916d7df54dbc78fb250d48b0201e48eb04f721c73fcc1b89a18","sha512":"bbdacf072fbf7ad991765df8613df91e713843bf64dd85ee468eb9fd6ca86d84ea1bcce1847c5df017fb7f32ca35db2bf5c6c7316bf8b6fc8e099ff47bfa5759","ssdeep":"","tlshash":"a9411db96ae339574c3c0f9c4ff4d2ba4d1e1366159321397880e3099bd764c4725961","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.669255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getParam?lang=en\u0026rtoken=cMIF19dGGa","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getParam?lang=en\u0026rtoken=cMIF19dGGa HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"135626b1926acb125cdfead910f30968","sha1":"cea04f2ffa09c01e7098aedea0a41fccd4f79a11","sha256":"73b0c1f0aa9cb7d2e9eb38514fe3e1f36376ca34e2aa0aab7489f4ec0e71dc37","sha512":"b5459b4b77e4d72544ddf36a65008c0da323aa0a7f32b031f1f41d50090235df9a467752aef0b85a6c63d89f1f0881fa7a1d0295b913dad1775ebb7a371c7d87","ssdeep":"","tlshash":"1121375d31d80c7bd7c68515ac4b2255bbd969eb14ee1cc446acedb028c7cd3884a953","first_seen":"2025-10-22T11:34:37.671817Z","last_seen":"2025-10-22T11:34:37.671817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":356,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:05.210Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: A8M7TyNa9zKGyzh/y6P2TA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":1,"connect":163,"send":0,"wait":0,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:06.590Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /Y3LIdgGg/ZeHRz5Thsx5A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":1,"connect":161,"send":0,"wait":0,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/datafeeds/udf/dist/bundle.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/tradeview/datafeeds/udf/dist/bundle.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-346a\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BX17zwLKw9wMP%2BXK5G4zoJoBDDqV5gWWYU8Q86bNqYw9etJnb4e%2Bk4E5ouWWG0OaXCeX9z63I1pD6oYRS9N8Hh59PhMxZrkqkWs%3D\"}]}\r\ncf-ray: 9928aed2192a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13416), with CRLF line terminators","md5":"c356bdc37296546bfde0acb3327ce305","sha1":"e5073d9fcd7820ee78cad1dbec5ecb5943bbb349","sha256":"bac505309e80d1ba3bf808a88e92ff2352bca9414e499ac8c68534d5dd276d33","sha512":"ad67bbf55927bc36b37f161724ef1a164b06711b5b2e86ee18add9bd7e613c73606fa62823635253587640de1915a236c226b0008361dec7fd426e57285ee52e","ssdeep":"192:Nge0jAoNzmAHSq7KhHcA1rQ1S2ZOAZXR0zA1GCL1G9U4jUs+f1gmUiC+xUv+4R5T:Nge0jAoNzmAHZWNASZNVziC924HAAVMY","tlshash":"c252a5da7611302142936032e87f2407913aba16688a903c71c9edde5efdb1deb17f39","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.508613Z","times_seen":65,"resource_available":true,"data":null}},"time_used":565,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/country.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/country.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-a613\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4lDxo06Ibb3ejll%2F7Th97MDjxuP5GLSzZlEP64ummjAP2%2F5zMLCyA7ZW7Q6SF%2FeJglcK%2F52so2x3TbbqIuQ2N4i5X8Gmi1BnMs%3D\"}]}\r\ncf-ray: 9928aed2292f0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42515,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9c74b5f155803aed2d7eeb507be5b72c","sha1":"41869ae30e996e32b809c2b7a4109c28f8f997c5","sha256":"fe00224aa91c5edc0295a74b219549cfabb98e753bdfad6a459ec155306311d4","sha512":"ea273a76cdf4b5d11795d00cf15a1642940415717892bb47ebddb4784f2479cd2920fc831096d506b7ca73cbf9ba70c4f6793e3ac3e8e1c93e0ca54739b2e818","ssdeep":"768:gcPm+K3DkdqvCJV3Woq+V04nDVnFz29JGPV/cBE9j:UMm4nDVndNcBu","tlshash":"ce13fe19d1ba4cb769adc42a70b6729048046b67ce603ac437ec735d4fad62f053a3bd","first_seen":"2025-03-08T09:36:57.835999Z","last_seen":"2026-03-08T22:06:26.40901Z","times_seen":19,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":574,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getGG?lang=en\u0026rtoken=HIemZ1MDR","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getGG?lang=en\u0026rtoken=HIemZ1MDR HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c76d720b1aca68db5a30dc61f1c47d9e","sha1":"bb4d035e541d4d3f6bcad1ba4b384c8e5816071e","sha256":"373aafc6362f882183f50d8b50aeaa64f149e228184355fa2b95e06246c720f6","sha512":"e09636d93881c500c68e223281ec90fbd5e4185234e7efa462242bfad5194a51a582ff7db7eb0a829820f1ba4a9228a273df69ef65215fda26f8d95e98e6f38e","ssdeep":"","tlshash":"38a022003e882e020f0ea02bec0cbcc02aac30eb8c00000acc8a2f3ccb238303b03030","first_seen":"2025-10-22T11:34:37.678697Z","last_seen":"2025-10-22T11:34:37.678697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1063,"timings":{"blocked":372,"dns":37,"connect":165,"send":0,"wait":306,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/datafeeds/udf/dist/polyfills.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/tradeview/datafeeds/udf/dist/polyfills.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-25e1\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLrdSM0ZfjDBjLIaLzvcOFIDhvsT8NcO5fa8h5GpZYp6DGOYDfEvgzFQooHiUqFNzR2WzGvLL%2B2q%2BsYC7Q3NT5kZbK0o5RP29kI%3D\"}]}\r\ncf-ray: 9928aed219270b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9697,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9695), with CRLF line terminators","md5":"ffed8bcc0af9db588e19127393f38aca","sha1":"5d7c37579a895c795e3b99e538bc21acab7d810f","sha256":"8b8d3e2917ea726f9bef63e6d089db0d83d275bf909b3e93cd816f053a43fc0a","sha512":"70557f07558317fd46f1186df5a4df6b4d53fc65c09b316af37f4cd914248d12c6d6c66fb3ef88f88236f14739b30ee86d892baa70f025ee59c668c66fccdf6e","ssdeep":"192:x5C5b4QNokiNLw0mrZA3KoluxV68ksmZ15UPQ0wx9Z4ESjxLhFZvL:/G1gsr7idsirPCESjxLhP","tlshash":"c1127488f7e0b46243a370b4917f550fb2b52925658e41b8f260d8ea6cfd04d962bf7c","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.524306Z","times_seen":65,"resource_available":true,"data":null}},"time_used":582,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/abox.8afeb2c.jpg","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/abox.8afeb2c.jpg HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/static/css/app.1f58ddf696b180b3188a467e612b9ba6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 219496\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-35968\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EQDsHrH793J%2B5RS1N7lwm2G41k%2BmLj1BKoR0S9bNr1k%2FhexsnkrzMHyOsr85Qcnry4BN3NMpzTFuHT5HZ%2F3jtDZl1csuVPvZ5W0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6d9ff0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219496,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x800, components 3","md5":"8afeb2c4c3e5345663d4469799e9df43","sha1":"31e96133ca45f0b130c736977d3d7d09c26a2260","sha256":"c9bd67cca12619ddaa0aaf2e8dd7957a8cbd6afefc40107959ecf84729a09db6","sha512":"3d700e8592ec85d60e52906de20233b9ef3ebac45d9b56d5ae963df1c59fc9fe8b8f1755f920a87f0197d78c38e514006df854da8c3a9e40fa05fcefb87aa559","ssdeep":"6144:6OU0HGo1XoK1OM1f9Lidr/ua0ZDP7tv6WEJ4OdPeYrHzOMwk8:6OUiGoaMB9eRmXxdhOdPeY7zOMwk8","tlshash":"28242357aee89b92cf11893d55b3218d9f8204cbcdfa9cfd147cbd8b4285c0b4625d1a","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.689383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":592,"receive":770,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/uploads/6880e102e73a4.jpg","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /uploads/6880e102e73a4.jpg HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106098\r\nlast-modified: Wed, 23 Jul 2025 13:17:54 GMT\r\netag: \"6880e102-19e72\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106098,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2022:03:10 11:48:25], progressive, precision 8, 1024x406, components 3","md5":"d4b6968c6bae81efc152b19d3a37a2e2","sha1":"658121195e7f0e9fba83fa0ac172603a83500d0b","sha256":"18df548f7ccdd3871cbee25fd56fb16d6865d76434ac94fb6d0ba29985873224","sha512":"cebad9dfaa8bbc975f84d7745b3060ebc567e919e3124bed4f4cc3870d8897660393eb2032da314d7c910ad68f1d84b1ea3d89b6a839df4b3faca607de2fc831","ssdeep":"1536:BmHm62mUCKEnPSuTsiY5eee1DQ3zHJ3YREueeeueeeeeeeeeQL81L7Y4xBxHUfuD:BkyEPRT/8l3fmA15Bx0N7iGYz","tlshash":"51a39d667a50d858d4c8327c58fcd281d3e70ee42e33649ebbada9163f5188cddc9583","first_seen":"2025-10-22T11:34:37.702132Z","last_seen":"2025-10-22T11:34:37.702132Z","times_seen":1,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T11:33:57.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Oct 2025 11:33:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 23 May 2025 04:39:18 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIPUtejNjdSEux7SKVhGwhOZqVxKvuH2MF9NGm8j15iW4bO1%2BBAMYYJMuAcVWdzJ%2F37KQ9i9PszkW%2BUPYoc%2BC%2F%2BKcUeA0k5t%2B44%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9928aecbfa840b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"2facaef9e29d6d48df2b5eb799e0bdbc","sha1":"4106150033496a09ba31c627ba2d6a4736535b67","sha256":"553aad4d248ecfcbdc790522c54070e0483da773febb774ebb5b3916b5eabd5f","sha512":"26ae144fc1836365ce297035c16634a27e930b09c5955e35f50ba2ad8b788d50038c9f15b975dd8c6e8725344617f65ab0057c6ff2328cf3bdb051e1a56f442d","ssdeep":"","tlshash":"e821eb021a04880f277183159cfb307ec43290e68d309415f38a199726fae6e99b3a2b","first_seen":"2025-10-22T11:34:37.707479Z","last_seen":"2025-10-22T11:34:37.707479Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":31,"dns":11,"connect":1,"send":0,"wait":559,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/css/app.1f58ddf696b180b3188a467e612b9ba6.css","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/css/app.1f58ddf696b180b3188a467e612b9ba6.css HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-6dc2c\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZFsPIco17f81wNYvgViN%2F2NPbUj96c9nkOapgBgURXx%2BMX3CoBlqYKY6Jv4r7aImP3YwJJGC79XEt8Kpeifv2u%2BCUOHHC1i%2FKo%3D\"}]}\r\ncf-ray: 9928aed229340b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449580,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"c61545e1e8ac617dfd55b161a7629934","sha1":"1ad398abb758cc840c24cf1bcf750af425c353a8","sha256":"96f576e15a71eecaa6ad304afbbe788cac2d57b8369cf2dc6086c4abcdd8c275","sha512":"bdeb28105f1bbb3b3374da844f851a378bdd8fea8087923d7b12bb49f4e8888475c816d9c1359f3f43254b35690cb5231e8ac752d6d60b6bab8dbbde7b6d7ced","ssdeep":"6144:1SM4Myn/RrnXo9PB8BsPp7B4g5dYobUAoZfQyfO:1SM4MynZ74lB8BsPp7B4gAobUAoiyfO","tlshash":"2ca4c622971b121ab13bda6866c07bca3e14d323d02317befe563419cbd7486266774f","first_seen":"2025-10-22T11:34:37.709685Z","last_seen":"2025-10-22T11:34:37.709685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":996,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":397,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/manifest.9d63956e24dd244b3be3.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/manifest.9d63956e24dd244b3be3.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-c49\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BRLgvUK5DDuUJ7scQBO0ftIWrAGHCKTdftu%2BzQAKUsXQ5cXZFQ932dJEWpj5sETC2hoGFFxvjzNCi1IJfpcYH70iY6fTO431Hk%3D\"}]}\r\ncf-ray: 9928aed229360b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3087)","md5":"ffd0bde2cf0405b193d2e0b99dd3124b","sha1":"cbde3b1bfeb3c2f4a61a82166b0cf4612e797a42","sha256":"ec20e45a9377d1db8da248524b25f55cbe116d4a84393192fdc562527cf0ac83","sha512":"1e4d78ea13d71ff2a84943622e423c57bff40bd9fe16222377e95c118a53594480547d9e4ba197916c6011a0d1c3c02911e829cbe1107c89b2a088e542dc72d7","ssdeep":"","tlshash":"f4510ae7777cb9d676f60864473ba3a8a03c35117d2cd880d2ddd1ab2c32d4056239e6","first_seen":"2025-10-22T11:34:37.711886Z","last_seen":"2025-10-22T11:34:37.711886Z","times_seen":1,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":591,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/1.a70c3395957c41b259d7.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:00.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/1.a70c3395957c41b259d7.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-eaf2\"\r\nexpires: Wed, 22 Oct 2025 23:34:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCYeao%2Fjlx3QDyb8SA9%2BakOaRAdAChJilYuWC5vZj3siK%2Bl9Saap%2Fw6TPX8gLHtQYNuTJZM1l8lj%2BnXKbEmZP0SE%2B2if%2BlarZCM%3D\"}]}\r\ncf-ray: 9928aedf99b30b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60087)","md5":"9c94d8161265a832ca9c55d01f710f2a","sha1":"e23b93e011f710bab3e77f17789970787fcebc4b","sha256":"6074670fc72603c1ba3176e0c32333d74b3143be9eab86148a0e71041fbdc431","sha512":"d04118497724c2e4f855708c4dc1ec167d0a0c43229455d9b7eb4a1c16da48d815bbcbeee70912b70b913f805cafed22a4459d021364cda4326a56eb9237f814","ssdeep":"1536:6S4pOx268H3V4H0dwj+JvFYttFAa8Ag3tTjXscFoqbYcZ:4sxQXGHSGtU3tTjcW","tlshash":"7743af1bb89b336f88394051413a6929f8372ecc952ad097f92ce9d4c5f5d39261fa3c","first_seen":"2025-10-22T11:34:37.713461Z","last_seen":"2025-10-22T11:34:37.713461Z","times_seen":1,"resource_available":true,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":566,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.725Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vpZYAui3KezigWubsMah+Q==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":1,"connect":164,"send":0,"wait":0,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/swiper.min.css","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/swiper.min.css HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-4d4a\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dcZE02lAnFl7Rt9PDOUCS09WTBU%2FrUia%2FBvLZOxpxxVsdHlV%2BmkeXzNl5wee9QsFvs6ATvj1BXM038UpWtqkmtfpdQEOcCecsMs%3D\"}]}\r\ncf-ray: 9928aed229300b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19786,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with CRLF line terminators","md5":"94160d512c97c05e7c4aeeadd30f23c0","sha1":"04261a673b7e5100f78742455b8b7eb48ae11566","sha256":"783bfe0f2494079631972de7df124e1341f235b0b37d51d3c488356c1fca06f8","sha512":"121df9bdbaa00deaada17df94f56fbe36ddce44494022760f21ce7e59dc589d62c296ca5b661d642a6ca0155081ee35c18a45c53f982b5d98df4cf3e76aff1cf","ssdeep":"192:PphaNv/lSSyJWCh8zfi5o/mXDN3eBxwdJ5R:PHa1/lS0Cifi5o/mXOGJ5R","tlshash":"b392622c17003057e2334f1a87d99778c724c9939e4358ef6250ee48c7bb96a32af766","first_seen":"2023-04-17T17:48:16Z","last_seen":"2026-07-04T00:32:49.510286Z","times_seen":85,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":567,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/web3model.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/web3model.min.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-69009\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcjXN5dTqsl7E353V8JzzD7lsZ3rMGwsfUHGfFoxl8Nbp4LkEXEGOOLfobpdhYkJTkxnQekIUMFWFGldxWZT3mYWv1yUbhUpsAU%3D\"}]}\r\ncf-ray: 9928aed2192d0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430089,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44112)","md5":"365c80971c9efc3f3e8087fc703f7667","sha1":"de6bd2aadd0984751888f6f59fdc81102e2f816d","sha256":"a4cd4c5feca9f7333052edb99312a899313e1f3f6b8f34ab7f8dcf01fe8d7a74","sha512":"f9470f1d189a597a3588b476b3efdcf97823dd0c87411f60607b641525c52605a7a2550f38337e50869a837fc1d6acf9029d5d17f66050fa94fbadf5b5feeeed","ssdeep":"6144:l76dr/jrE/0NNWS9UO2/HP2jz05O1HaeJ3qZEZDj9+b+Q88MzfFNo8vq5:56d9DZzaneYZEl5+qQ8zztN85","tlshash":"6c94aee93582f42157f366b740af1806b33d691b140c88a0f255edd5e8f84aa913bff9","first_seen":"2023-03-07T12:03:15Z","last_seen":"2026-07-27T13:45:14.751184Z","times_seen":413,"resource_available":true,"data":null}},"time_used":1296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":733,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/xby_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:01.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/xby_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3244\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-cac\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7q5mTf5SRuNn0e1KsrzeLTLIaAAfY3WnC2hSoD5Dbpv%2FJy57Xs8HVdcD6VWh5qGxx3QzLmMFK6peg2mbpanRQdFV5WqV6vcpWSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee669f00b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 8-bit colormap, non-interlaced","md5":"7777fedcc2ecdab31ac4d5d647f040cd","sha1":"54b9368f8b417a1ba63f1c2272d69dd48689ec13","sha256":"135474f8bd574130ff74ff1e18c566fadb7c39f4333c019849e61aff6d811596","sha512":"ad166c2258f0115527555d08f998f31df3cfc5ae1991d119563c7a67b6eb4c496fbd8253584ede9302bbc77a34008d7dba11c1ff909473d8892d91f2f2cbbd77","ssdeep":"","tlshash":"59615b87d415122e748dcaa7830f5f32e463cc993688dbc4fa12a023487b657c38360d","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.724206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":597,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/dy_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/dy_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 137\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-89\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rH0XCfd8pw6CL15g8pctZ5YXg1xTOAHjx1Zlfl1Jh55NaENoM87hnnMuSiNTNIccApwwhr4vBTnpEtYxd8WbJIAuNo7M67axXPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee669f20b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 150, 2-bit colormap, non-interlaced","md5":"1d2024891f1ba1d71a25ba6319080608","sha1":"04b1c4b942993b760f7feb7b3a0bcb4dbb8db502","sha256":"71d0174aa5c759bda952c00edec6764c36f0935107ac943fad2a6327928d2e88","sha512":"b088fb8d479583866f431db29ea0d623a8b4bc48d7da48e4f8083f331ccbceadf22eaaf298b96576bc32f6cfcd7eb19f698247349021fd3e036a794b3f6c14cb","ssdeep":"","tlshash":"cec02b9ef3609ca0dd05443f050f6303b42fb039caf002c20080ce1023171ccc540945","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.72799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/reg_checkcode?lang=en\u0026rtoken=JmH9j2uaW4u","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/reg_checkcode?lang=en\u0026rtoken=JmH9j2uaW4u HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"6d8cdb6ae446fd3b6842c627dae2a9f3","sha1":"f840365184c67ccb105db95cc0742674504611e5","sha256":"013c8075dd5198b118e390c7f2454c5ede8892e56b998309b24e83dafa646480","sha512":"efce6f351378d2a0a7abf51a9f4ab5435f61cd5eb86b3489cd27a7a6a6d507a623f5ed6c65a6ebf681e85501f17ec63988d7114db063e9f353871f96376fe738","ssdeep":"","tlshash":"8fa0244314dd303345034013cd0d1f014f3c10311d00100cdc4d534457730343131017","first_seen":"2025-10-08T18:47:54.152661Z","last_seen":"2026-07-04T00:32:49.535234Z","times_seen":47,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":362,"dns":41,"connect":161,"send":0,"wait":184,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:04.168Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: UnR16MBDNo9YSc+qymaujA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":1,"connect":164,"send":0,"wait":0,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:08.486Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: D1/TWyM2Q6QFVBKaF/NoIA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":1,"connect":163,"send":0,"wait":0,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-22T11:33:58.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/ HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:58 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jqItuesYGGZ1TVnz62V%2FMeyw8TqlKVBnyWslWKcKj8LKEn5gjnYlRYFSnFL%2FC0b4fEND58dZRpEu8YeJoxG8PuF%2FgjFF6MZ5OEw%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\ncf-ray: 9928aed098fb0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.4.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]}],"data":{"size":6822,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (956)","md5":"bb8f3f36bb742ca9d56a4cb132fc2f67","sha1":"f65524e88d99b120fd5a0547a82ace4f2997038b","sha256":"8c2c7701d24551022c555a34af43e858368b8ecd3ea12e0b8c0259fa7cfe29dc","sha512":"2fbca185e6d9a7af4f8c8b39359308b9414396f758aa0f2e80a9ea44fccd78403a0200fef65777814efb2f9336919735a59bf5005282fefbcf6dae9d512ed861","ssdeep":"96:EWofVLobZ1NPpr0g/ucRVDSrXJX/cu90w+RRlbiOjkV4/Ob5EzsAAR:E61NemucLD0XJ0Or+RRlbnjkGg5JAu","tlshash":"8fe1a65a1c52c05619325868237bb718b60ada979b0adc00f6ce41bc5f0cf8d5afbbcd","first_seen":"2025-10-22T11:34:37.732182Z","last_seen":"2025-10-22T11:34:37.732182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/logo/favicon.ico","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:01.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/logo/favicon.ico HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:01 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\netag: W/\"688b77c2-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xHnw0K4FhhWAupTuv7YZhI%2B1M0kj9q1OS0h4tw9jlxqUMJmKtqFu7BqBOG1tELT%2FvqxpQWXy2eTs0RgH4TpN%2BP63kTpPE5LmqA%3D\"}]}\r\ncf-ray: 9928aee109cd0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"97a2bf8177328d9e578907d4a579a61d","sha1":"82f1619168d1bea4b928789fb8ef4b7789074234","sha256":"fbbc8191a82dfe993779e72adc098d7f66d95f42cf1fa147466f3e9c179e1f73","sha512":"9b952634129a4c28f81f9868dd9a3a8d5083af100bea4792dcb29c6ee2c6e76e2728ac2c71a5ea97c1aaadba26702f7d200fd609dbfd286d2240407f2a38f6c0","ssdeep":"24:sukD+TKakV8iWV4m4m43aXaoaXaXaoam4m4m41WUV8UaxIR+M12n:aTwiPP/PPQID12n","tlshash":"e491c47b97648685e052017ecd0bfebac4376e306cc658442cd73cb73a39b2a61a64c7","first_seen":"2025-10-22T11:34:37.738812Z","last_seen":"2025-10-22T11:34:37.738812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":597,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/en_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:01.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/en_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1021\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-3fd\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OdjBDVOYPopAo4stoGClSCIY4us7UlHisZcQkd9Pv4qTuh%2BALlLtCth3gh3bWy8XzRTyY6c9LvzFcafKcTuRaF08L38m8KOKx%2FI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee659ef0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 4-bit colormap, non-interlaced","md5":"ae5290e6cc26d1a9922c8e60801e3141","sha1":"cb8f2bf1380e505dec7530db5d21cba4fa789356","sha256":"587e3d716cbe42eabb23c907ef5812978590e2b66f03a714e8abcc0972efc611","sha512":"f9bf7becf23822ab4a251436930d69d0463ee95f402101e6e756d444b6dc2ff25b36689ce7caf7544aec1b6bde46c8c0d177197780bb8b9b313559a4cfba436f","ssdeep":"","tlshash":"db119878d44539f8532c6638c26906d421306b09da61af2b0507ff0f5fcbc05698d6bf","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.741533Z","times_seen":3,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/tw_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/tw_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1244\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-4dc\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4DluzWqJWYdzRWMg3Vb%2Fo2KZOwR5CawGHtDcdVlktO28ru3%2FJZrQgqSzTzVX2HNN0u0wysP8tE%2FqR09T5mxMV52VFtFbWKQ2%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee699f80b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 213, 4-bit colormap, non-interlaced","md5":"114afb9f21b482f452bdb58407fb6524","sha1":"780c8f4390831434c17e285410755edb34048876","sha256":"dfc186a9078c2b104924b1cb4d736bbcd6b0b313328a804e91dfb205c67fa9e7","sha512":"16f6e0101cb3df0bcded61101cdcb4edcc29ea896c5d6c1c20d4479275835dd9b558a8486efc89c6c0e0218a01da51ff939ed9e0c662969578a4c7c3bb5f766d","ssdeep":"","tlshash":"49215487e274fd1f675a62d2e89794d1483a00073624776bbf56086da9a00f0e09a851","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.745825Z","times_seen":3,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/uploads/6880e130a54c3.jpg","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /uploads/6880e130a54c3.jpg HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 128415\r\nlast-modified: Wed, 23 Jul 2025 13:18:40 GMT\r\netag: \"6880e130-1f59f\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":128415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2021:07:20 16:46:01], progressive, precision 8, 1024x406, components 3","md5":"45f622a59a7424fc70005bb15a6fc590","sha1":"5fb14ec5743025456c5451f4e2da0e6bb68f87b8","sha256":"444236c11e04d5383794524dba52776861688b643f99df339227d12a517a640f","sha512":"373476fec6d07a05faae4a97592f15b4e0a4a98e5a225124e9244b1fab97a0ef5b28822d90cf24ae7e3ac482f4ab97c8b87f9fbf1e58e90992f8b8eca11a1a7d","ssdeep":"3072:SMUMJ9lByHNjeZoU+C9BkVd1XYqKAZPV9QDBTXp8P/:n9lwHNjeXBuNZK0X0BLpE/","tlshash":"2dc31226af47cd30ccd1967128be81d3007b4e196893e993f0ac36d27fe55938d68e66","first_seen":"2025-10-22T11:34:37.747146Z","last_seen":"2025-10-22T11:34:37.747146Z","times_seen":1,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/tradeview/charting_library/charting_library.min.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/tradeview/charting_library/charting_library.min.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-296f\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FMFc5qf61KAd1yFyQtkKlUAuz8bHoY90CTPWwcXcP%2BeHkBi%2FyFPE7X1zoSS%2FjayFsXssYrZLjX7eXUI16248cJtQAtYLiaWAFrc%3D\"}]}\r\ncf-ray: 9928aed219260b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10605), with CRLF line terminators","md5":"5b40dcdd638760f8051c1beb4963fd0c","sha1":"e24b3841ff36373ce7366055eca40e479886dd4f","sha256":"283ed6337112f2cae0dcb51a26326dad7e09c03b8699dbad441cf7c5ba35965c","sha512":"43e207cc06b5b0d6e9a5fc24052822e16538feed91d07f06f70d8f546fbfeeb63687f707ff0f2d54b57a9d6286bc2fed211b6a83fb604dc86227c9914c7a6c37","ssdeep":"192:9faWSo7kjFU8oBelr6lw2rfnzKIQPlaF1iJ7K+Ei/ISJhvHIheu5Ph3Ffa5:0WS2kjFU8oIlD2rfn2I5iNK+5/ISJhvB","tlshash":"93224058ed247c720acb40f0427f190f8239e678d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2023-03-26T07:29:42Z","last_seen":"2026-07-04T00:32:49.49869Z","times_seen":78,"resource_available":true,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/js/vendor.cc9d8cde26625aac9ecd.js","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/js/vendor.cc9d8cde26625aac9ecd.js HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-1b3910\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KsW7SFmGLatpf5ywSyGABmW7us8ww9espHKG5llFiuHIj5rPmVI6WM0zlZfkHkgWmh2SN0nmLbEiGgQnALXgC3DohL0UzYoDsUI%3D\"}]}\r\ncf-ray: 9928aed239370b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1784080,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37287)","md5":"db165c0e68707805f346407f1911308b","sha1":"cc68fe41b1087b0afd4a3c96d11e1b9c56a05455","sha256":"103c6ff4f8dc97bf94c099c857fc78da862d07a0d05195be5528970347cacccf","sha512":"8dbf77db43044896c0039fec6b889140684c6e33b2682c7bc006a3465e3d7124728e1dafd31908e1bcc3cf1634d35f7ed1aaa0ad3fd6477aa6175d2f7ca6669a","ssdeep":"12288:O/5H4K/h+NlpJ8ei75Gm5PiMta2JpIjuiXuHBBL2w:OBH4KZoj8eQGm5Pzk2JaSiXuHBBL2w","tlshash":"ff25199d32c4b06643e331b5503f240fa3372859a80ec558ba66d4daacbd55e623bf3d","first_seen":"2025-10-22T11:34:37.749817Z","last_seen":"2025-10-22T11:34:37.749817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":1088,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/jp_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/jp_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-2a7\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glH3Rkjvlr4a2Stsuzh8iYui%2BLh5qy2inQivsS3vRGdK6XmHpJIQYK4%2BMRVDy2nxtP04hQYZ37u2CAx1lIE27z4TML4AkJtYyt0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee689f30b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 4-bit colormap, non-interlaced","md5":"34acc14752305119b7699e4b3b44fcf1","sha1":"88ed164338ac50113f4674cc576b2db8a0cc9ea4","sha256":"993308ae2f31717ee0b85156629d5c20403367b74efd390a94d0a237ba23044f","sha512":"a1f5a75ccd3bac7967b771920a9b8a26f7f14b7121c75c85f5b3bc2a358fdef3c4e16a8ee63fac16dc2f9f536d393f299a5f7a0b83d66fa427732735fc1b4a84","ssdeep":"","tlshash":"c301fee620562d818b47f812a3861ca8ac9d984e2d25e87e4328544da5f0fdd93893ff","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.752687Z","times_seen":3,"resource_available":false,"data":null}},"time_used":573,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":573,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/yn_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/yn_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 608\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-260\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWqL7SNiW%2B7F1D0yXvRF8xIN9kG0To3EEy4rw9uC9KKMJ1zlwLdr%2BOD4dedX%2FqLS8nou9ZL3CE4Nhk4EufCpSgLuQzOjsx3zkIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee689f60b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 4-bit colormap, non-interlaced","md5":"0689ca9c05e996465e891ff9ca6269f5","sha1":"4445387c7d13ec844653afbe6e670600fa914f7d","sha256":"66427f7f8d49bee3c9afaeeed2ce260ef451700d2aa327cf56a85742b36a6caf","sha512":"0d075b6bf2ca4acc6504ce1411fb8bcb0b2340c87945c88464794e4f2077c837d8452075c2aa3b77c5b15e73233e2999e587db11de7466ce350cea79b75e93b9","ssdeep":"","tlshash":"d9f0b740bc843cc654ed38e6bdd5c42f209101193b6b3b2f36053e016e020cd3952283","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.753718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":607,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/img/box021.f6e2eb2.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/img/box021.f6e2eb2.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 10363\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-287b\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NZlU8rKfFPfgTtWhTNpw%2Byz20GsBF1P6wgADE2Jk%2FDp88AzHgQYhJrCAwSCaRHQRijNBSfdrHXv8nDa0%2BARRPHuTmXFL0sIKAsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee6b9fd0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10363,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 60, 8-bit/color RGBA, non-interlaced","md5":"f6e2eb2332d646e90acc667b58bfa053","sha1":"09628cbc4dc2e0c4848ad6ef25965559c614e42c","sha256":"2bff8844835b2832d955c36b754d2a9d58734fa4eb3fe8188a59af9ddfe7318b","sha512":"5945835aad6f740b4c36f910485914f241cb74135ab2740afa9f0139b4f226ae871346863f089ef39dce2f928174eea65863c720ab87f774be42feed2996d46a","ssdeep":"192:5sSHIIHUCD4waFc+ZLid9eMDmOWNVINaqAFpG64TZkzb0xIbfZE15rQ3+Cj:F50w6dZmfeGmOWNV0aF3GVFMbmIdK5Ax","tlshash":"1d22bf15f1440b06212fe57f0a456c4ce2e516a0a3fcadcd1deb92ad4aa2e157e7cb43","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.754559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":800,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":606,"receive":194,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/web/getParam?lang=en\u0026rtoken=aRszLXiI2H3z","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /web/getParam?lang=en\u0026rtoken=aRszLXiI2H3z HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://okweb3dq.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: false\r\nset-cookie: think_var=en; path=/\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1315,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"135626b1926acb125cdfead910f30968","sha1":"cea04f2ffa09c01e7098aedea0a41fccd4f79a11","sha256":"73b0c1f0aa9cb7d2e9eb38514fe3e1f36376ca34e2aa0aab7489f4ec0e71dc37","sha512":"b5459b4b77e4d72544ddf36a65008c0da323aa0a7f32b031f1f41d50090235df9a467752aef0b85a6c63d89f1f0881fa7a1d0295b913dad1775ebb7a371c7d87","ssdeep":"","tlshash":"1121375d31d80c7bd7c68515ac4b2255bbd969eb14ee1cc446acedb028c7cd3884a953","first_seen":"2025-10-22T11:34:37.671817Z","last_seen":"2025-10-22T11:34:37.671817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":968,"timings":{"blocked":371,"dns":39,"connect":164,"send":0,"wait":213,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.web3ftk.shop/wzpic/","fqdn":"api.web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"47.251.1.76","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.web3ftk.shop","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Oct 2025 08:37:27 GMT","end":"Tue, 20 Jan 2026 08:37:26 GMT"},"fingerprint":{"sha1":"C9:15:B8:25:EE:55:38:56:26:8B:2A:AA:3C:48:83:1A:AD:50:64:51","sha256":"96:49:5C:E8:CC:F2:AB:5A:7F:91:3A:21:3A:0C:25:B2:A3:BE:27:26:E8:CE:D6:EC:ED:BE:F9:ED:5C:34:90:69"}}},"request":{"raw":"GET /wzpic/ HTTP/1.1\r\nHost: api.web3ftk.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: nginx\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/credit.css","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/credit.css HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-478\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7BaAibYEgGwNLSSSRGll5ObcJDDxP3BcycyYxzHUv1kJHmr%2Bx7bcsJaIse97AOpcK0wWbBQnlMjVWEMo8FvzG0nitlCxzad9MTQ%3D\"}]}\r\ncf-ray: 9928aed229330b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c42f7416e41ed279c4c28bf2eec30e3c","sha1":"63e1137275532a804c8c5d63e0943dee46bf417a","sha256":"7d25b2e9634043685eb8065c91e1f54ca19d0cb647211cc9bb0f4b65d1289d70","sha512":"6bcf387a24891f1a377a21577e7b53b20236a7d93cd8c5ca64dd40d42947bc291442effe6a83c5c341f0dccbeb66747d435363325f8a081756940a3d45872ccc","ssdeep":"","tlshash":"44219b2e9b8d684196a67e921dbd27346e3e10fb1e230ed5f208d620b6c681701b5a56","first_seen":"2025-10-22T11:34:37.756449Z","last_seen":"2025-10-22T11:34:37.756449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/fy_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/fy_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 140\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-8c\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GgBYmYtNAo4VIItSj%2FCeVQcbVMoGSHzviBIuZp9jm%2BL%2FrlmyYmd9yL3iaKnBu3K1Nyk%2F9IXMb0kIPtuWJRhLKBAyv4arm%2BfU24o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee669f10b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 150, 2-bit colormap, non-interlaced","md5":"7748184350d7cc99ce774ad4a7414232","sha1":"a87e482d39de87e0ea914afb2c41590962b69fd8","sha256":"86be336b91bcd96b77d74e6854c62afea673eaefafd9e871362f1be4dd614e67","sha512":"ef17e0862b4214abf3c86f16ee41ed8b72b9e808a3c8d6ec5ea304c03997043107e907a3ed16d7b3325e61fb2ea170c532fc186e2c1ca2c3e73025e966acb376","ssdeep":"","tlshash":"25c02bdfc2600cb0c849007268b300809831c30c012946db8509cc2900d3078f070683","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.759502Z","times_seen":3,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/image/ty_flag.png","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:02.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/image/ty_flag.png HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:34:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 196\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\netag: \"688b77c2-c4\"\r\nexpires: Fri, 21 Nov 2025 11:34:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkvvVnVmbkrwY5vo7sEYp2ZW%2FIL%2BI3gzYY0uEu27uE%2BjnFTIX85%2FWsAUR57xOIfT2vP1U4yBVxGSnbu1HPqI89ye2kZOagAQqOw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9928aee689f50b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":196,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 167, 4-bit colormap, non-interlaced","md5":"0d7773fed7bd4bce064884d01bf21878","sha1":"bf01d2c6424f4385c5cf6464e5aa6f97324aac6e","sha256":"821057b8a28962355d2c9feb02c3377e1bd869d94a57ef5033aebfac89dc085d","sha512":"63ea9230daf9b3c94ca14ffddb724f401ddc87cd83262e6c9bea03cecc3d27d781ebe5f431c331d231d38e5d0faefef8470ed81b4fa85072738288e0035c3706","ssdeep":"","tlshash":"c2d01281be4aedb8827767a591d94815d4267079222f30d91026dd267c4701dc0ab56f","first_seen":"2023-12-02T16:50:12Z","last_seen":"2025-10-22T11:34:37.761495Z","times_seen":3,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"web3ftk.shop:3000/","fqdn":"web3ftk.shop","domain":"web3ftk.shop","tld":"shop"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:34:11.156Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: web3ftk.shop:3000\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://okweb3dq.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gFsYmAw0zYUkoDx6K3BBvQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T07:01:06.594609Z","times_seen":17738619,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":1,"connect":163,"send":0,"wait":0,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"okweb3dq.com/pc/static/iconfont/iconfont.css","fqdn":"okweb3dq.com","domain":"okweb3dq.com","tld":"com"},"ip":{"addr":"172.67.132.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://okweb3dq.com/pc/","date":"2025-10-22T11:33:58.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"okweb3dq.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 08 Oct 2025 06:12:54 GMT","end":"Tue, 06 Jan 2026 07:10:15 GMT"},"fingerprint":{"sha1":"97:51:2A:5A:76:6C:F4:70:8C:5B:60:76:D7:B4:5E:31:CE:77:FC:E9","sha256":"27:E9:BD:13:E8:02:2A:09:22:50:66:CC:D4:0D:50:6E:5E:3E:67:7F:FE:34:C4:77:3A:08:16:58:49:4A:AA:F8"}}},"request":{"raw":"GET /pc/static/iconfont/iconfont.css HTTP/1.1\r\nHost: okweb3dq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://okweb3dq.com/pc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 22 Oct 2025 11:33:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 31 Jul 2025 14:03:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"688b77c2-aa6\"\r\nexpires: Wed, 22 Oct 2025 23:33:59 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKWaiIYqq7X2oSjH6vGG3qf6KPYO6MsIomDolbEBQTW%2BhOMgACkStmKJxVHLGB2mYJjafE8nuqwev%2FiJzfdNk9JBDi%2BDmfqKB%2F4%3D\"}]}\r\ncf-ray: 9928aed219250b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1881)","md5":"d4b57e3bf5f0d884a87f7e1407a33fe9","sha1":"8ced0b4ac39585697df330a7dbc5e2117bfd6b53","sha256":"4d14c1efbb8bd96627bea6d2dd6059898b849a55c8e71042a4e1123ae31fdbae","sha512":"30fc241e922e86163a0570c065f938493e6d4ecce651cc5c2262b3da3d363224425fa4161cd367ad47dc1d72026ca0324407631d9dfc5684aa5a640addd27ec4","ssdeep":"","tlshash":"81510afa186c38905ba4787033e779249e4818ef5e2e5886952e345d99f3f00e2e1bdc","first_seen":"2025-08-04T10:45:31.463104Z","last_seen":"2026-03-21T15:52:34.927772Z","times_seen":27,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":611,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-22","alert":"Sinkholed","trigger":"okweb3dq.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}