{"report_id":"d4d4f377-225c-43f5-b0df-e1f7de1e1e5b","version":0,"status":"done","tags":[],"date":"2026-10-07T13:18:25Z","url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"title":"Exclusive Access VIP","dom":{"size":58171,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (487)","md5":"128d1bcb00b1dc3dbecdc7b13d46d9f3","sha1":"32125821114ac918886468692879e558408c511c","sha256":"336eac6b5f2625cdc4f7939449e094fc8626224f8a326c391c1ca5781997e07c","sha512":"45e200e9d0814c683e355133bf9183072331cdc2d43cdd14e1a73092da8fa2b017c438c690d7d1ba3efd61243f2f021dbe168b9643f260d061b311710e0b2b7c","ssdeep":"1536:ty9VS46sqIyUDhFXCy5r1rJr6r9rJrZrkr+JCr7r3rIrLrjrLrirgJ6NBWu:Uyy5r1rJr6r9rJrZrkr+JCr7r3rIrLrU","tlshash":"4943606251f30572166b94d57ba71b5b3aa0d003c40fca287aee67888fced91ed53b1c","dom_hash":"domhashc420ce257e369b40d1f17e125921eb66","first_seen":"2026-10-07T13:18:33.088377Z","last_seen":"2026-10-07T13:18:33.088377Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":0,"asn":14061,"as":"DigitalOcean, LLC","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T13:18:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-10-04T22:46:21.559025Z","alert_count":0,"request_count":3,"received_data":91635,"sent_data":1617,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.yandex.ru","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2026-10-02T07:07:42.582858Z","alert_count":0,"request_count":1,"received_data":225819,"sent_data":464,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2026-10-05T21:38:53.827244Z","alert_count":0,"request_count":4,"received_data":4918,"sent_data":4028,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"bopvm.com","ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-10-03","domain_rank":0,"first_seen":"2026-10-07T12:58:59.159907Z","last_seen":"2026-10-07T12:58:59.159907Z","alert_count":18,"request_count":18,"received_data":930457,"sent_data":8900,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b37382773c119efbad19117e14fabed","sha1":"f745243d7fa04d81ad27eb0e21661ae4f0c7e13e","sha256":"ae38a449855acaed12c68844280136776cc9d7e5f59f6f80c407b21cc4de9eb4","sha512":"a9dfc81d5b24757afd208e4234695c02075b8c5fb19ce738c4cd7ac1460bdfd9ab869d6548a8e96d30b96dd6d352434674a267329b366633f681ab2b56574441","ssdeep":"","tlshash":"83f0e1e63c8a552883a302653b7792887139252f780ead11b91c18922fc4e6524a751c","size":600,"data":"","first_seen":"2026-10-07T12:59:04.522349Z","last_seen":"2026-10-07T13:18:33.129959Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"769134103b6c75b78190d7aa4892dfd7","sha1":"34caba70c142c88d93a402987a2ea290ad2bb97f","sha256":"bf7bb4b91b8b6784309063295c4d6b8e693e96760e96650df94f05186ad0419b","sha512":"b286f71af1c5c185676f1d374914af1b949cde0e34f180fae4059ebe2e9d5c20a188d5060b707bb0f3bed2a1b5df4d0154ab330072fc43b65c1c40400c8237d0","ssdeep":"96:cQiMmD0o7fsUJOdi1RpC+PS6DwD3+0BokyVEV0QKHBRk8zenE108r/U:cQBWTdJOm7CaSko3jodKQBR5OE108r/U","tlshash":"d0024d0d71b221350a7330ba97cf6188b625a003a449cc667e4e93485fd3f21a2b3bed","size":8409,"data":"","first_seen":"2026-10-07T12:59:04.523553Z","last_seen":"2026-10-07T13:18:33.131015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=113368876","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0ec4f0afd5c5c0e4479cbe05d4ed540","sha1":"cd7f014e2cff5a701942ab14ad74fe99ed65f2e9","sha256":"6b7da0557639c9b87878909231154259603d8bb526ddbbfd897b03bba52a2a2f","sha512":"7cc0ff32d0d44411733723891f29f469604fdc643114ef4d5338e71c2335e85bf4bc384c4a503d2de7da9cc7c00dfbbe275bb47016dc29a057612b3dfe310409","ssdeep":"3072:KBJuhoEqyY0MkUlZbVi2O9WPHwzZt5KZ/byaKf:mJbJlp29WozUgDf","tlshash":"a724e6d97682b47693733474903f000bb1beac92f04c8995e186e9d57e789ac9237f2d","size":224978,"data":"","first_seen":"2026-10-07T13:18:33.101736Z","last_seen":"2026-10-07T13:18:33.101736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to load code:can't access property \"textContent\", document.getElementById(...) is null","filename":"https://bopvm.com/","line_number":1399,"column_number":29},{"level":"error","text":"Failed to load code:can't access property \"textContent\", document.getElementById(...) is null","filename":"https://bopvm.com/","line_number":1399,"column_number":29},{"level":"error","text":"Failed to load code:can't access property \"textContent\", document.getElementById(...) is null","filename":"https://bopvm.com/","line_number":1399,"column_number":29}]},"http":[{"url":{"schema":"https","addr":"bopvm.com/media/brooke-monk.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.002Z","timestamp":1791379068002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/brooke-monk.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 62026\r\nlast-modified: Sat, 03 Oct 2026 16:18:22 GMT\r\netag: \"6ac12ace-f24a\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62026,"size_decoded":62277,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07861e1f384b51cd13480890b52b1105","sha1":"e31221fae664f274340fbf743ce76b7b0fecdc44","sha256":"98df37d35a1a81b542db6e50a9ddd8732e38612859fefaac4372fae567e59e98","sha512":"79b41d661472fb244c383e64f54d2bd3a7c7a7d2a8f6b970146baba7ef037afe1d798af687843bf3fde753f19f36a7e97ad05ecc86abe58c8a5f10ba4beb5354","ssdeep":"1536:MbhanVOPr3lrQ4HrrMrSpd2pzU4mbwrojLMdZ1blFUtw1N2L9m+jj:MgVOPx8MUpzZmb9L8pF12x/v","tlshash":"075301587d2cb056d9feaf2ad8b539c0ba110c73ba0ce93852c4914392d7ebfc856790","first_seen":"2026-10-07T12:59:04.519449Z","last_seen":"2026-10-07T13:26:48.933992Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/aishah-sofey.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.009Z","timestamp":1791379068009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/aishah-sofey.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 96642\r\nlast-modified: Sat, 03 Oct 2026 16:18:21 GMT\r\netag: \"6ac12acd-17982\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":96642,"size_decoded":96894,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31fb4f26b36d5a9ef79a94ac60658de7","sha1":"a31de5269b5e1d6f94d6335a5d82cfac2ebca2a5","sha256":"3af17bac975e05565998c36c67ecf2550239d67056390803fc0a16bb47f7407a","sha512":"19473b16649aa6eae447f4721bc07dfba14d74b19bbf6d8957abf18ee17b15af532f1c008eb26675d9e543b7ae7c81058184c0b35ca50aa0a4e5fd4db79b645e","ssdeep":"1536:9gdwI2fzJsp+IMCXfL6hkBxG4uYO+DcDLJl/FCGevOSplOMw8//+Av:9o61s6qzmS5O+gl/BevOvC/N","tlshash":"c793023a8838fb6cb3d26710c8dc163f1b01b0e56c95f9ce667100de7e6c94e9495ae8","first_seen":"2026-10-07T12:59:04.520634Z","last_seen":"2026-10-07T13:26:48.929428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/madelyn-cline.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.012Z","timestamp":1791379068012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/madelyn-cline.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 100700\r\nlast-modified: Sat, 03 Oct 2026 16:18:23 GMT\r\netag: \"6ac12acf-1895c\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":100700,"size_decoded":100953,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"901b092a095d177f7a25ba1feaf480ef","sha1":"e97f9a332f84b92df139c9d7558b838976b669e5","sha256":"d02c6b82e5a6128b8eac331410122e79bb869ca4d03bbcf65e12fe68881a21d5","sha512":"207483ab8cf608c8f75bdbdb7ba2c28ede4253577c78b381b5b861a0721ee7a98587bca75b5f44f83820ce9be155bbb4d262d9943be6a2316b4c5b7e65f66d4f","ssdeep":"1536:D59/bvHRA1yiS3FFqhOXCzX2m5sk6MIAA+zR38OQGtwOSqwaiBh4mJk8urN:Dv7RA1o3zqief5kApz+OHwYNiHHWN","tlshash":"f9a312a81ae24dc5daf772f580f9c11b169fbb0b62b3dae85fb6692110c81f5503580c","first_seen":"2026-10-07T12:59:04.518351Z","last_seen":"2026-10-07T13:26:48.925979Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/madison-beer.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.014Z","timestamp":1791379068014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/madison-beer.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 81110\r\nlast-modified: Sat, 03 Oct 2026 16:18:24 GMT\r\netag: \"6ac12ad0-13cd6\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":81110,"size_decoded":81362,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7341cbbba200f3f50c538f5a7054e5c1","sha1":"f4536b7afb949a85317fa8aadb413fd460dd15fe","sha256":"b3c3f8c46d9c8bb846a29bcb5521ab9302132bd8790fa6d77d80c0e9b8e55087","sha512":"652e8de5f195a77bb38bde9249e385013ee50b2a0cd0026ac143ade56c26cb743536f57a43949e86fe9a7d1fe06380b57240a79a566291757e21c5185e136d1d","ssdeep":"1536:56EAWg3b0HEfYC4by+mO5nazKv7Y4hQrLxlAtAiMNgKu2I9F:oEJCGuYLBjna/LxcguDj","tlshash":"598302de0e21c21ee856351a81865501217ae28efa972df29fba3f054f8bd2b170c695","first_seen":"2026-10-07T12:59:04.496642Z","last_seen":"2026-10-07T13:26:48.923227Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/links.json?t=1791379068076","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.116Z","timestamp":1791379068116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /links.json?t=1791379068076 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 07 Oct 2026 02:16:26 GMT\r\netag: W/\"186-65d36b3d2237b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":390,"size_decoded":435,"mime_type":"application/json","magic":"JSON text data","md5":"e65dfcd68aa67a79724732e50cb1bd3c","sha1":"00c7b7720b4f9322707707b28b51e84780654221","sha256":"1b43c9661a82a3b784326d02a513a550884bf012c783abe14c647027f908a395","sha512":"3b165660f837cda6f2552d8c52343bab14ffcfd7e0dff3c2685b1a1e82907bcc6c3148569d2cc5af7803bb3633bc5c2e41de91af41f8e7f84a165caa52e45629","ssdeep":"","tlshash":"2be012b7f17d8c005a341b947b242814afd7441ecee0e143856502bdac391b94d30933","first_seen":"2026-10-07T12:59:04.512531Z","last_seen":"2026-10-07T13:18:33.09452Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/favicon.ico","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.632Z","timestamp":1791379068632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 03 Oct 2026 15:36:25 GMT\r\netag: W/\"328-65cf169632ffd\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":808,"size_decoded":579,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-10-07T17:39:59.278908Z","times_seen":39510,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/css2.css","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:47.990Z","timestamp":1791379067990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 03 Oct 2026 16:18:25 GMT\r\netag: W/\"6ac12ad1-13b0\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5040,"size_decoded":658,"mime_type":"text/css","magic":"ASCII text","md5":"e3f14a4c45c5938618780835aa159d1f","sha1":"c4943ff3a244da4a67a182a4834958aeab0d30da","sha256":"3f9f276a25208f997ed3b70adff9333570c7f3bd280ab9666405ffd8abea2995","sha512":"fcc8a9005fe0a014a8e0bf8cb45ac3e702930b0ed52b58f260076a48b97b88967c559df0d990aa19c79bd06550de5dbb2a0ee23d901e8601343e5ea417e8a461","ssdeep":"96:qOEbabXOEbab8Jc+ufOEbabINbOXbabXOXbab8Jc+ufOXbabINbOxMbabXOxMba1:ZbYbIzb+b3bIEbvbGbI5bwbtbICbj","tlshash":"47a1cc91041f5184eb835dd263da7e36ee0f60526818d46a9bfd18e8bcead72832271d","first_seen":"2025-10-16T19:22:03.16376Z","last_seen":"2026-10-07T13:26:48.919452Z","times_seen":44,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/sophie-rain.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.001Z","timestamp":1791379068001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/sophie-rain.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38392\r\nlast-modified: Sat, 03 Oct 2026 16:18:24 GMT\r\netag: \"6ac12ad0-95f8\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38392,"size_decoded":38643,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"06e6d6c6ffe7b47482d45ded09eb613b","sha1":"8af713d0cde0399cbe11f079778acd398813dce6","sha256":"e921e71b26c28ee3fff45326dcf987233eceb758dae6a22192e2f38d42a4523f","sha512":"1d2c149cd1d444243b0ea21d19580e17f5b6bf5c7caf75b72f6fe390e150cd27de31e0f4e0effa4bdf38197fc0e6f1f710b868349f602b270c263d5333129ea0","ssdeep":"768:k0HZXd/MpA/WmHgL0kQLJw+Dl5KWXZudrTJX0FTf+:3HZqCnasJw+xIAYRh0f+","tlshash":"a103f1cd620ca74cdbae79fd3fa27806159d36b23f780eb82e1b110451ab9d65d245b0","first_seen":"2026-10-07T12:59:04.515044Z","last_seen":"2026-10-07T13:26:48.932712Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/piper-rockelle.jpg","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.004Z","timestamp":1791379068004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/piper-rockelle.jpg HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 218438\r\nlast-modified: Sat, 03 Oct 2026 16:18:24 GMT\r\netag: \"6ac12ad0-35546\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":218438,"size_decoded":218691,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 938x1277, components 3","md5":"9a2a1ee1a00bf57711639d69fe10451a","sha1":"7b4dc2e638289079f9b513bc8410d2476bf195e2","sha256":"b871cb97f795e602c02a59e1da334ed6d115e8f311e3c4d2026ef10bd2a9bd2c","sha512":"d8a5e941ebee61a576c0238e0f24e67f11db05818ea6b91102e19818cb652a984843b870d79d2a2d732c38eebee7e8e7b5696bdac6a17bc559b21d5e920e54b4","ssdeep":"3072:LnXYMTKJN7aM63kbdzept+kA2fhoio7VSnbsVfVBd1Md9XoXGGX+L/:79Q7P60bdzept7AAlq0b0J1c9XsGGOL/","tlshash":"5e2412cd3a5013de63e683aed901a0ad81ed6848ced56e057bcdc9e33cdc45bc9916ac","first_seen":"2026-10-07T12:59:04.516221Z","last_seen":"2026-10-07T13:26:48.934968Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.076Z","timestamp":1791379068076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bopvm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163025\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-07T14:57:52.396738Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":37,"send":0,"wait":21,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/links.json?t=1791379088088","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:18:08.092Z","timestamp":1791379088092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /links.json?t=1791379088088 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ym_uid=1791379069241304517; _ym_d=1791379069; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ym_uid","value":"1791379069241304517"},{"name":"_ym_d","value":"1791379069"},{"name":"_ym_isad","value":"2"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:18:08 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 07 Oct 2026 02:16:26 GMT\r\netag: W/\"186-65d36b3d2237b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":390,"size_decoded":435,"mime_type":"application/json","magic":"JSON text data","md5":"e65dfcd68aa67a79724732e50cb1bd3c","sha1":"00c7b7720b4f9322707707b28b51e84780654221","sha256":"1b43c9661a82a3b784326d02a513a550884bf012c783abe14c647027f908a395","sha512":"3b165660f837cda6f2552d8c52343bab14ffcfd7e0dff3c2685b1a1e82907bcc6c3148569d2cc5af7803bb3633bc5c2e41de91af41f8e7f84a165caa52e45629","ssdeep":"","tlshash":"2be012b7f17d8c005a341b947b242814afd7441ecee0e143856502bdac391b94d30933","first_seen":"2026-10-07T12:59:04.512531Z","last_seen":"2026-10-07T13:18:33.09452Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js?id=113368876","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:47.988Z","timestamp":1791379067988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /metrika/tag.js?id=113368876 HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-encoding: br\r\nexpires: Wed, 07 Oct 2026 14:17:48 GMT\r\netag: W/\"6b7da0557639c9b87878909231154259603d8bb526ddbbfd897b03bba52a2a2f\"\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: bh=YPyMmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Thu, 11 Nov 2027 13:17:48 GMT; SameSite=None; Secure\r\ntiming-allow-origin: *\r\ncache-control: max-age=3600\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bh","value":"YPyMmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.ru","expires":"2027-11-11T13:17:48Z","raw_expires":"Thu, 11 Nov 2027 13:17:48 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YPyMmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Thu, 11 Nov 2027 13:17:48 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224978,"size_decoded":82900,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2533)","md5":"f0ec4f0afd5c5c0e4479cbe05d4ed540","sha1":"cd7f014e2cff5a701942ab14ad74fe99ed65f2e9","sha256":"6b7da0557639c9b87878909231154259603d8bb526ddbbfd897b03bba52a2a2f","sha512":"7cc0ff32d0d44411733723891f29f469604fdc643114ef4d5338e71c2335e85bf4bc384c4a503d2de7da9cc7c00dfbbe275bb47016dc29a057612b3dfe310409","ssdeep":"3072:KBJuhoEqyY0MkUlZbVi2O9WPHwzZt5KZ/byaKf:mJbJlp29WozUgDf","tlshash":"a724e6d97682b47693733474903f000bb1beac92f04c8995e186e9d57e789ac9237f2d","first_seen":"2026-10-07T13:18:33.101736Z","last_seen":"2026-10-07T13:18:33.101736Z","times_seen":1,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":2,"connect":47,"send":0,"wait":86,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/demitra-kalogera.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.006Z","timestamp":1791379068006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/demitra-kalogera.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 121608\r\nlast-modified: Sat, 03 Oct 2026 16:18:22 GMT\r\netag: \"6ac12ace-1db08\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":121608,"size_decoded":121861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a54c814120e4290f3d85fc1ca87311bb","sha1":"78ce40700f4d2cc6436cba677075fea4a3157bd8","sha256":"0cdf5261415b6f9444f4d5c8b1fbff3d903979ddbfec55967cf4fd473f8e0029","sha512":"10c2bdd69110cfeffbbd8a2c385fcc44071cc9696df6625755623eb991cdd10830e4ff610d3a470c47f2992cb760b6813ebf64cf5cbca1856f038be0e9a5dc63","ssdeep":"3072:I/8CjvxV5xAiDOUoZAlgVh2TH2QUb0/dZSHc:IkGvxFAiOMlIR0/dZS8","tlshash":"c2c312a178ccd13858e0dace43d426a957f37e5b66339f85187f4ca4274e52ee2ed800","first_seen":"2026-10-07T12:59:04.50923Z","last_seen":"2026-10-07T13:26:48.921755Z","times_seen":4,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/jenna-ortega.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.011Z","timestamp":1791379068011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/jenna-ortega.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 132320\r\nlast-modified: Sat, 03 Oct 2026 16:18:23 GMT\r\netag: \"6ac12acf-204e0\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":132320,"size_decoded":132573,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5fa66ce0c0820930c4269f2cdae85b95","sha1":"36f20f7927b6b9dd3e061e2b7626320fef637f01","sha256":"1f9618081e040b64849fead3ea44583d9ea08a05839668da1e0b478499aacde8","sha512":"9ad29bdfb16a9c8c444361bd1ecc5c12c2851fe3b921b613d8584fcb3b62a0f1dbf20f9c2cc066bf954420d52406183785d41ab2cd7a72afbe4620afbea1e1f3","ssdeep":"3072:MCL3CZhK1riip5A/K4jdvG4jzGaksUPBbIdj:MCLyK1aK+vGkysSpIR","tlshash":"2cd31238cb21dc8563200752016dcb07b786fe63ce4ee9eb8b756b025917eb1af91536","first_seen":"2026-10-07T12:59:04.517318Z","last_seen":"2026-10-07T13:26:48.922557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/media/tiktok-pro.webp","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.015Z","timestamp":1791379068015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /media/tiktok-pro.webp HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8436\r\nlast-modified: Sat, 03 Oct 2026 16:18:25 GMT\r\netag: \"6ac12ad1-20f4\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8436,"size_decoded":8686,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c6b4f3cb17366ef1c5b1a63260e3126","sha1":"89ebf053b607dfdd627e910c0d50ca79ee83f805","sha256":"bb7c653c27f21afa45447355002b07802b8fb5eb1d71e1dd7a151f9c5db04271","sha512":"9ea1fedb686efa514150c1c402d0b21abd79bc49665ca9318dbec583a5d9505f8f51321a78b41d43f7a0cd4bd3c041b5b3247a8b67ad5561394b20ad709258c8","ssdeep":"192:qex9ohCf+TdqQriGjNJGS1p4ap+3grBYJqvlxnz5ATidUVe:d9ICf+Tv3LG8mZCBkJe","tlshash":"0c02af958a147ea2d06db13c76316f8c9394fbddf1ad9031b39cd55899030a0db549f2","first_seen":"2026-10-07T12:59:04.503041Z","last_seen":"2026-10-07T13:26:48.928679Z","times_seen":4,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.078Z","timestamp":1791379068078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bopvm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163025\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-07T14:57:52.396738Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":25,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/code.json?t=1791379068076","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.114Z","timestamp":1791379068114,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /code.json?t=1791379068076 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:48 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 03 Oct 2026 16:18:25 GMT\r\netag: W/\"1e-65cf1ff9cb87d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":297,"mime_type":"application/json","magic":"JSON text data","md5":"a35db9f67b88285d4c1d6a94e91ebf68","sha1":"4dbbdf217462f3e35257e5e103ca03db538a0350","sha256":"20f7ab8ba55d9c275dee50d254a725a3dcb18a2fbc96052d12d4d50d360591ed","sha512":"0ca56ce5cc6cb2c40dced85ec2799a80cc5845648173db26e6768927e393e0a1f97a2f0911fa52c701930c31836675834ccf7c4bf25cd3c3ccac462c1aed2017","ssdeep":"","tlshash":"9780003cc022800882f0b088308a080320882a8202a80aac0cca832c82800a08a08b20","first_seen":"2026-10-07T12:59:04.505051Z","last_seen":"2026-10-07T13:26:48.918556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:49.320Z","timestamp":1791379069320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 43\r\nset-cookie: bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure\r\nexpires: Wed, 07 Oct 2026 14:17:49 GMT\r\ndate: Wed, 07 Oct 2026 13:17:49 GMT\r\netag: \"6a969cb3-2b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: *\r\nlast-modified: Tue, 01 Sep 2026 09:36:51 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ntiming-allow-origin: *\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"bh","value":"YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-11-11T13:17:49Z","raw_expires":"Thu, 11 Nov 2027 13:17:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":860,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-10-07T16:48:03.237273Z","times_seen":115673,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/code.json?t=1791379078087","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:58.092Z","timestamp":1791379078092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /code.json?t=1791379078087 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ym_uid=1791379069241304517; _ym_d=1791379069; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ym_uid","value":"1791379069241304517"},{"name":"_ym_d","value":"1791379069"},{"name":"_ym_isad","value":"2"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:58 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 03 Oct 2026 16:18:25 GMT\r\netag: W/\"1e-65cf1ff9cb87d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":297,"mime_type":"application/json","magic":"JSON text data","md5":"a35db9f67b88285d4c1d6a94e91ebf68","sha1":"4dbbdf217462f3e35257e5e103ca03db538a0350","sha256":"20f7ab8ba55d9c275dee50d254a725a3dcb18a2fbc96052d12d4d50d360591ed","sha512":"0ca56ce5cc6cb2c40dced85ec2799a80cc5845648173db26e6768927e393e0a1f97a2f0911fa52c701930c31836675834ccf7c4bf25cd3c3ccac462c1aed2017","ssdeep":"","tlshash":"9780003cc022800882f0b088308a080320882a8202a80aac0cca832c82800a08a08b20","first_seen":"2026-10-07T12:59:04.505051Z","last_seen":"2026-10-07T13:26:48.918556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:48.079Z","timestamp":1791379068079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bopvm.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 05 Oct 2026 16:00:43 GMT\r\nexpires: Tue, 05 Oct 2027 16:00:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 163025\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29732,"size_decoded":30545,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-10-07T14:57:52.396738Z","times_seen":1289,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":30,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/113368876?wmode=7\u0026page-url=https%3A%2F%2Fbopvm.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2660%3Acn%3A1%3Adp%3A0%3Als%3A81596916673%3Ahid%3A28197564%3Az%3A0%3Ai%3A20261007131748%3Aet%3A1791379069%3Ac%3A1%3Arn%3A739955027%3Arqn%3A1%3Au%3A1791379069241304517%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A531%3Awv%3A2%3Ads%3A4%2C68%2C25%2C0%2C1%2C0%2C%2C390%2C8%2C%2C%2C%2C516%3Aco%3A0%3Acpf%3A1%3Ans%3A1791379067561%3Arqnl%3A1%3Ast%3A1791379069%3At%3AExclusive%20Access%20VIP\u0026t=clt(695)clc(0-0-0)rqnt(1)rfs(1)ufs(1)aw(1)rcm(1)cdl(na)eco(6374544)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:49.314Z","timestamp":1791379069314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /watch/113368876?wmode=7\u0026page-url=https%3A%2F%2Fbopvm.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2660%3Acn%3A1%3Adp%3A0%3Als%3A81596916673%3Ahid%3A28197564%3Az%3A0%3Ai%3A20261007131748%3Aet%3A1791379069%3Ac%3A1%3Arn%3A739955027%3Arqn%3A1%3Au%3A1791379069241304517%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A531%3Awv%3A2%3Ads%3A4%2C68%2C25%2C0%2C1%2C0%2C%2C390%2C8%2C%2C%2C%2C516%3Aco%3A0%3Acpf%3A1%3Ans%3A1791379067561%3Arqnl%3A1%3Ast%3A1791379069%3At%3AExclusive%20Access%20VIP\u0026t=clt(695)clc(0-0-0)rqnt(1)rfs(1)ufs(1)aw(1)rcm(1)cdl(na)eco(6374544)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nOrigin: https://bopvm.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nlocation: /watch/113368876/1?wmode=7\u0026page-url=https%3A%2F%2Fbopvm.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2660%3Acn%3A1%3Adp%3A0%3Als%3A81596916673%3Ahid%3A28197564%3Az%3A0%3Ai%3A20261007131748%3Aet%3A1791379069%3Ac%3A1%3Arn%3A739955027%3Arqn%3A1%3Au%3A1791379069241304517%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A531%3Awv%3A2%3Ads%3A4%2C68%2C25%2C0%2C1%2C0%2C%2C390%2C8%2C%2C%2C%2C516%3Aco%3A0%3Acpf%3A1%3Ans%3A1791379067561%3Arqnl%3A1%3Ast%3A1791379069%3At%3AExclusive%20Access%20VIP\u0026t=clt%28695%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%286374544%29ti%281%29\u0026redirnss=1\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\nlast-modified: Wed, 07-Oct-2026 13:17:49 GMT\r\nset-cookie: yabs-sid=1783549341791379069; Path=/; SameSite=None; Secure\ni=nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g=; Expires=Sat, 04-Oct-2036 13:17:45 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=3867292931791379069; Expires=Sat, 04-Oct-2036 13:17:45 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=3867292931791379069; Expires=Thu, 07-Oct-2027 13:17:49 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1822915069.yrts.1791379069#1822915069.yrtsi.1791379069; Expires=Thu, 07-Oct-2027 13:17:49 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure\nbh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nexpires: Wed, 07-Oct-2026 13:17:49 GMT\r\naccess-control-allow-origin: https://bopvm.com\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"yabs-sid","value":"1783549341791379069","quoted":false,"path":"/","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yabs-sid=1783549341791379069; Path=/; SameSite=None; Secure"},{"name":"i","value":"nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g=","quoted":false,"path":"/","domain":".yandex.com","expires":"2036-10-04T13:17:45Z","raw_expires":"Sat, 04-Oct-2036 13:17:45 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"i=nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g=; Expires=Sat, 04-Oct-2036 13:17:45 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None"},{"name":"yandexuid","value":"3867292931791379069","quoted":false,"path":"/","domain":".yandex.com","expires":"2036-10-04T13:17:45Z","raw_expires":"Sat, 04-Oct-2036 13:17:45 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yandexuid=3867292931791379069; Expires=Sat, 04-Oct-2036 13:17:45 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None"},{"name":"yuidss","value":"3867292931791379069","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-10-07T13:17:49Z","raw_expires":"Thu, 07-Oct-2027 13:17:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"yuidss=3867292931791379069; Expires=Thu, 07-Oct-2027 13:17:49 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure"},{"name":"ymex","value":"1822915069.yrts.1791379069#1822915069.yrtsi.1791379069","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-10-07T13:17:49Z","raw_expires":"Thu, 07-Oct-2027 13:17:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ymex=1822915069.yrts.1791379069#1822915069.yrtsi.1791379069; Expires=Thu, 07-Oct-2027 13:17:49 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure"},{"name":"bh","value":"YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-11-11T13:17:49Z","raw_expires":"Thu, 11 Nov 2027 13:17:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure"},{"name":"bh","value":"YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==","quoted":false,"path":"/","domain":".yandex.com","expires":"2027-11-11T13:17:49Z","raw_expires":"Thu, 11 Nov 2027 13:17:49 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Thu, 11 Nov 2027 13:17:49 GMT; SameSite=None; Secure"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":45,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/113368876/1?wmode=7\u0026page-url=https%3A%2F%2Fbopvm.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2660%3Acn%3A1%3Adp%3A0%3Als%3A81596916673%3Ahid%3A28197564%3Az%3A0%3Ai%3A20261007131748%3Aet%3A1791379069%3Ac%3A1%3Arn%3A739955027%3Arqn%3A1%3Au%3A1791379069241304517%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A531%3Awv%3A2%3Ads%3A4%2C68%2C25%2C0%2C1%2C0%2C%2C390%2C8%2C%2C%2C%2C516%3Aco%3A0%3Acpf%3A1%3Ans%3A1791379067561%3Arqnl%3A1%3Ast%3A1791379069%3At%3AExclusive%20Access%20VIP\u0026t=clt%28695%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%286374544%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:49.466Z","timestamp":1791379069466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /watch/113368876/1?wmode=7\u0026page-url=https%3A%2F%2Fbopvm.com%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A1hkuu7q9oojr202mtyg5uinyhckcg63%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2660%3Acn%3A1%3Adp%3A0%3Als%3A81596916673%3Ahid%3A28197564%3Az%3A0%3Ai%3A20261007131748%3Aet%3A1791379069%3Ac%3A1%3Arn%3A739955027%3Arqn%3A1%3Au%3A1791379069241304517%3Aw%3A1152x921%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A531%3Awv%3A2%3Ads%3A4%2C68%2C25%2C0%2C1%2C0%2C%2C390%2C8%2C%2C%2C%2C516%3Aco%3A0%3Acpf%3A1%3Ans%3A1791379067561%3Arqnl%3A1%3Ast%3A1791379069%3At%3AExclusive%20Access%20VIP\u0026t=clt%28695%29clc%280-0-0%29rqnt%281%29rfs%281%29ufs%281%29aw%281%29rcm%281%29cdl%28na%29eco%286374544%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bopvm.com\r\nReferer: https://bopvm.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=1783549341791379069; i=nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g=; yandexuid=3867292931791379069; yuidss=3867292931791379069; ymex=1822915069.yrts.1791379069#1822915069.yrtsi.1791379069; bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"yabs-sid","value":"1783549341791379069"},{"name":"i","value":"nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g="},{"name":"yandexuid","value":"3867292931791379069"},{"name":"yuidss","value":"3867292931791379069"},{"name":"ymex","value":"1822915069.yrts.1791379069#1822915069.yrtsi.1791379069"},{"name":"bh","value":"YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag=="}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 731\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Wed, 07-Oct-2026 13:17:49 GMT\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://bopvm.com\r\nx-content-type-options: nosniff\r\nexpires: Wed, 07-Oct-2026 13:17:49 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":731,"size_decoded":1499,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7b441b3b50e1566a2857d73c43a08ed2","sha1":"fbccc31967383b0381694761b797b42703fb1c58","sha256":"a21305e23b8db2a1b10687cdf21a712f38eca75a0d8326366589581c834166dd","sha512":"ecb1cfa56834ddb9f3046af596b44e03a09bf8cdc4f5410d246b3f354b173aab4399beaa85bebf1b22f2f8899ea26cdf48a4e879e339f28aa21e6f480cfc0ce0","ssdeep":"","tlshash":"dc01104a891c0bf0d64b8a4140eb3b0b115c70a9ec8286d4e68aca9508cff33730fbe0","first_seen":"2026-10-07T13:18:33.121565Z","last_seen":"2026-10-07T13:18:33.121565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mc.yandex.com/solid.ws","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"77.88.21.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:49.734Z","timestamp":1791379069734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 12 Jun 2026 21:18:15 GMT","end":"Sun, 22 Nov 2026 20:59:59 GMT"},"fingerprint":{"sha1":"33:9B:55:F9:46:06:2A:3A:07:72:9F:25:BD:B9:52:0B:AD:79:FA:29","sha256":"E0:48:C1:7E:FC:87:73:8A:59:4E:3C:0C:65:3F:95:0F:47:27:36:4D:32:67:5E:DA:18:7B:04:C0:33:81:53:C1"}}},"request":{"raw":"GET /solid.ws HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://bopvm.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oMoptUD0R8nZcyWlYWiFIg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: yabs-sid=1783549341791379069; i=nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g=; yandexuid=3867292931791379069; yuidss=3867292931791379069; ymex=1822915069.yrts.1791379069#1822915069.yrtsi.1791379069; bh=YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"yabs-sid","value":"1783549341791379069"},{"name":"i","value":"nKtj066wNRhl9tivXsqF/SDr4y32mM9aBixpHToC4PD52lzDo2dftq5YqvREGz1dnsl9l87k8wQe8Vg3nCNzYOXS69g="},{"name":"yandexuid","value":"3867292931791379069"},{"name":"yuidss","value":"3867292931791379069"},{"name":"ymex","value":"1822915069.yrts.1791379069#1822915069.yrtsi.1791379069"},{"name":"bh","value":"YP2MmdYGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag=="}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching protocols\r\nStrict-Transport-Security: max-age=31536000\r\nUpgrade: websocket\r\nConnection: Upgrade\r\nSec-WebSocket-Extensions: permessage-deflate;server_max_window_bits=15\r\nSec-WebSocket-Accept: l6RcQEE43xAKOXqSFDb26FcfU+Y=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":246,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T17:40:57.828978Z","times_seen":18920785,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":44,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/links.json?t=1791379078088","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:17:58.096Z","timestamp":1791379078096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /links.json?t=1791379078088 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ym_uid=1791379069241304517; _ym_d=1791379069; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ym_uid","value":"1791379069241304517"},{"name":"_ym_d","value":"1791379069"},{"name":"_ym_isad","value":"2"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:58 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Wed, 07 Oct 2026 02:16:26 GMT\r\netag: W/\"186-65d36b3d2237b\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":435,"mime_type":"application/json","magic":"JSON text data","md5":"e65dfcd68aa67a79724732e50cb1bd3c","sha1":"00c7b7720b4f9322707707b28b51e84780654221","sha256":"1b43c9661a82a3b784326d02a513a550884bf012c783abe14c647027f908a395","sha512":"3b165660f837cda6f2552d8c52343bab14ffcfd7e0dff3c2685b1a1e82907bcc6c3148569d2cc5af7803bb3633bc5c2e41de91af41f8e7f84a165caa52e45629","ssdeep":"","tlshash":"2be012b7f17d8c005a341b947b242814afd7441ecee0e143856502bdac391b94d30933","first_seen":"2026-10-07T12:59:04.512531Z","last_seen":"2026-10-07T13:18:33.09452Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/code.json?t=1791379088087","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bopvm.com/","date":"2026-10-07T13:18:08.089Z","timestamp":1791379088089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET /code.json?t=1791379088087 HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bopvm.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ym_uid=1791379069241304517; _ym_d=1791379069; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ym_uid","value":"1791379069241304517"},{"name":"_ym_d","value":"1791379069"},{"name":"_ym_isad","value":"2"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:18:08 GMT\r\ncontent-type: application/json\r\nx-accel-version: 0.01\r\nlast-modified: Sat, 03 Oct 2026 16:18:25 GMT\r\netag: W/\"1e-65cf1ff9cb87d\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":30,"size_decoded":297,"mime_type":"application/json","magic":"JSON text data","md5":"a35db9f67b88285d4c1d6a94e91ebf68","sha1":"4dbbdf217462f3e35257e5e103ca03db538a0350","sha256":"20f7ab8ba55d9c275dee50d254a725a3dcb18a2fbc96052d12d4d50d360591ed","sha512":"0ca56ce5cc6cb2c40dced85ec2799a80cc5845648173db26e6768927e393e0a1f97a2f0911fa52c701930c31836675834ccf7c4bf25cd3c3ccac462c1aed2017","ssdeep":"","tlshash":"9780003cc022800882f0b088308a080320882a8202a80aac0cca832c82800a08a08b20","first_seen":"2026-10-07T12:59:04.505051Z","last_seen":"2026-10-07T13:26:48.918556Z","times_seen":4,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bopvm.com/","fqdn":"bopvm.com","domain":"bopvm.com","tld":"com"},"ip":{"addr":"138.68.153.54","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T13:17:47.587Z","timestamp":1791379067587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bopvm.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 03 Oct 2026 15:26:36 GMT","end":"Fri, 01 Jan 2027 15:26:35 GMT"},"fingerprint":{"sha1":"9C:1C:30:B6:97:33:3D:43:B1:1C:8B:59:EB:90:E4:15:14:D8:E2:E0","sha256":"D2:84:3A:21:B9:76:2A:A9:17:15:80:8B:D1:22:85:A6:FD:BF:86:54:CC:5B:32:24:5C:04:64:6F:F7:9B:93:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bopvm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 07 Oct 2026 13:17:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 06 Oct 2026 00:19:56 GMT\r\netag: W/\"6ac43eac-e720\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":59168,"size_decoded":8417,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"4dcae963007e1a0618aea4cc25239492","sha1":"c239a6f2765f20b8e2e2b3523fcf86c254413313","sha256":"a26843a27c6e2e9f33b6165f3a482e8a0ce71d0a33510c75a9eb3ca833d11164","sha512":"dbb322e8315e24ead319faf70b337756fd8b779fe9e95a447922dafc946e74f43e3fb973b782b8dc3e7d9eb21df802e725c68944b3af59b2c5c554eabb2fe048","ssdeep":"1536:sZ9Bt551lppKyQrbrLrKrnrRrJrSrVxirhrJrYrtrjrTrYrbBkBRyl:00yQrbrLrKrnrRrJrSrVxirhrJrYrtre","tlshash":"7f43402591c20522127bd2d9af634b5efbd58003c60b82197bee638a5ffad10e953f5c","first_seen":"2026-10-07T12:59:04.507095Z","last_seen":"2026-10-07T13:18:33.127872Z","times_seen":2,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":3,"connect":21,"send":0,"wait":25,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"bopvm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}