{"report_id":"d79b154a-5fc1-410b-86e9-b6db5732a1d8","version":0,"status":"done","tags":[],"date":"2026-09-06T06:42:31Z","url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"title":"EFOOTBALL COINS FOR FREE","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-09-06T07:59:45.832103Z","times_seen":1046664,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-11T06:42:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.highperformanceformat.com","ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-09-01T07:29:36.818763Z","alert_count":3,"request_count":1,"received_data":49966,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"n6wxm.com","ip":{"addr":"104.21.12.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-15","domain_rank":0,"first_seen":"2026-04-01T10:47:37.908194Z","last_seen":"2026-09-01T10:54:52.854491Z","alert_count":0,"request_count":1,"received_data":169156,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-09-04T15:10:33.193473Z","alert_count":0,"request_count":1,"received_data":24035,"sent_data":523,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-09-04T07:15:02.597085Z","alert_count":0,"request_count":1,"received_data":397660,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"wow-l.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2021-04-07","domain_rank":0,"first_seen":"2025-08-11T14:39:14.597614Z","last_seen":"2026-08-04T03:00:11.533975Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":500,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":1,"received_data":84983,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"duw03nk63ml3f.cloudfront.net","ip":{"addr":"13.249.7.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-09-23T13:27:15.399574Z","last_seen":"2026-09-06T06:39:58.464712Z","alert_count":0,"request_count":1,"received_data":27798,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-09-04T17:51:30.548893Z","alert_count":8,"request_count":4,"received_data":9749,"sent_data":5978,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"ldrws.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-08-31","domain_rank":0,"first_seen":"2025-11-20T16:42:01.737457Z","last_seen":"2026-09-02T18:00:46.676715Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":609,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bnstore.xyz","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-11-04","domain_rank":0,"first_seen":"2026-09-06T06:39:57.792031Z","last_seen":"2026-09-06T06:39:57.792031Z","alert_count":0,"request_count":8,"received_data":410188,"sent_data":4040,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"dtvpp42hfuyb2.cloudfront.net","ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-08-25T21:43:52.594844Z","last_seen":"2026-09-02T02:46:11.665496Z","alert_count":0,"request_count":2,"received_data":8873,"sent_data":1034,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":520612,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"63.181.132.243","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-09-03T06:58:46.864624Z","alert_count":0,"request_count":1,"received_data":514,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"eventHandler","is_inline":false,"md5":"d5ef3eeb6fcda9861e1edf0a89a7cefb","sha1":"b0d55c138dfe890faa6e8bbd59fe1c8ab726291f","sha256":"2b3165a8c98f5351f41d5240e5e6ecfa689b012a082213302d003bf280eba595","sha512":"6760a892038cb950d484388599daf69f5956b62293fe80c404456cdfb89c4bf55e5c8df90a47108e51186db9200af07e247fa3ae4c7a4ae5e3674c5256fec681","ssdeep":"","tlshash":"23a00283746759640e9d9767006057d9357990095e45a5044c3415208125ea17535790","size":60,"data":"","first_seen":"2026-09-06T06:40:02.977453Z","last_seen":"2026-09-06T06:42:34.68106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FB3NRDELDP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"610a6a8a6e6d3b1c74371ae1450c962a","sha1":"1b432c1c3e897470f49e1759ab526705fcb96f77","sha256":"65144e92c7896a016db4ae9a0eae1eeb7e6bf8ea671f0063fed0cfb7d38ed3ad","sha512":"fa5d18bebf60fd9333ed0057976c6ca56b0b53d55df0b1c0926f333a22fa71a85f211c974922442db0bd9e0f988c2e490c10e2f14f8caecd122a05e1b736c352","ssdeep":"6144:3pO/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHo9L:3gAoZMcS0y5xvvSZ","tlshash":"07b408cd73c674229396f178903f018ba57b28a2b45cc89af289dce42d3469a5177f7c","size":520008,"data":"","first_seen":"2026-09-06T06:42:34.679546Z","last_seen":"2026-09-06T06:42:34.679546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"n6wxm.com/vignette.min.js","fqdn":"n6wxm.com","domain":"n6wxm.com","tld":"com"},"ip":{"addr":"104.21.12.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e89e3228575908e31299671078eddc90","sha1":"804a2bbdf5614572a34058d6663a2f5ef706b67a","sha256":"0dc1ec5e3d7e7fdbd6518e14d4b897e541fbf1fb5a0ba223429f69cfd47b1a2c","sha512":"bc7f818c730537f25496a9d61070795a82f5ccc00f09d728454067ad5a86da27ca7afd2d78e0a457209104de0b4dc96b77b91144966761c09a483e89663f2d3f","ssdeep":"3072:L98sKfeC9/obfXajKYVSwC2tC2HhYTHHypOsls+0MG7KDRWn36/N07JeI2GBoGqV:58oa1OncLPWnK/N07JetDLJ","tlshash":"05f3194bf696b59907a39170523f850fb6276c90240f9f42e056d1a23a3704ea3fbedd","size":168134,"data":"","first_seen":"2026-09-06T06:40:02.951956Z","last_seen":"2026-09-06T06:42:34.673253Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"729e3dbb995505f04b31721146bf9902","sha1":"88a348ffbc80bd3a03d28eef33c4e19678da9f8f","sha256":"09818a9e918bc87684ceeeb48a9fcacfb39111b830824bf3664582d132a93585","sha512":"70f61b8403e16a4d5c75cf216e53266fbd4082a39844cda063664fb9f3b512ed881fcc65c3b447ab943c71154fe5739a4b8ca5ebcf6af4a01d1274a1827535b7","ssdeep":"","tlshash":"8f21ead65d0ca35d2bb3358dd1116231ad36c20a5cd144840dea5c426391e96fe76fe4","size":1274,"data":"","first_seen":"2026-09-06T06:42:34.681747Z","last_seen":"2026-09-06T06:42:34.681747Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/public/external/check.php?it=4454953\u0026time=1788676916188","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-06T08:16:19.960597Z","times_seen":3536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"edaebe2189acc625c53f3d7b3a2d57ce","sha1":"add8f629de6a8e840808e72777468ccc380cb68e","sha256":"6b204d9f885bd4c63dd00920fe138a431935c169eb2d01416d2979961caacea5","sha512":"1a898ab2d5ea219c1f3af1b0b978f619cc785b43c9a2375f6073e321ab3ccf17caf6e9a8ab34dcf5c54bd091cc4593579770ae2abcf4b06d7d000010ae4ca920","ssdeep":"","tlshash":"77c08c89250b1c7080a72b554f3f6142b005320151909c31181a22088f20e27a388804","size":157,"data":"","first_seen":"2026-09-06T06:40:02.969931Z","last_seen":"2026-09-06T06:42:34.683153Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"898c909f91f2eaff9ca1b5351ac60da7","sha1":"d8332e5012f685461ac2a167e92e56324f78e203","sha256":"39f3ca5e638e23fa42739ba3623c7d7988294ca1e5ab667e4baa8b42907e788a","sha512":"32a19d770e1c297f70bf7f086b08b1433e26ea0f66e7492f6626ff83756840db0711b374f5fe68057e22fdf7ddcfbc70a6454dfbf8ef68c19252a22367eaabae","ssdeep":"","tlshash":"d821f02789e330b04167a0652b3f25416493366b94acc98c3c7de7018f189f6691ede5","size":1117,"data":"","first_seen":"2026-09-06T06:40:02.97129Z","last_seen":"2026-09-06T06:42:34.683943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ff1b83a39fe1474ca74547c053446d3","sha1":"cf4ec5d77ec3d3c8af4bcf2f1e49d2a2c2161ed4","sha256":"4468c92467323c19851d64508d23020597ed8bd921a245a216d97f36de0c3c8f","sha512":"50e05e6119fa1b39ae0ebea64ffb12037fac4ff793b6a21f457235a5c528e67f2ef0a64810989ef24fdd4e8c916a2ef570baaaabae012695d343c1828fccfd8c","ssdeep":"","tlshash":"0b90223c80808228882803003c0220303802b200022a000a00c020880830022800082a","size":57,"data":"","first_seen":"2026-09-06T06:40:02.973195Z","last_seen":"2026-09-06T06:42:34.684509Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"66c4545b2b7254187fd8c6a34840d3db","sha1":"abb8d621573bd9a363a9b5fcea534036f9ed1622","sha256":"b2ca6d002da731ba4e9b0b922d20acc065f549ada391d6ba64b6df82da92c57f","sha512":"7f4e61ee458e28dccb4d705cb8803d53a0fa8beef65890f7435cc5201442c264e643e39b06e98c060b67d272f95508a50ca5c1ca5a66e35f9900fb4bab37a890","ssdeep":"","tlshash":"7ad08cea60d3309199892c5f0a2c08012320403b6e0a2c263bcc34000fc840844f2a76","size":236,"data":"","first_seen":"2026-09-06T06:40:02.974583Z","last_seen":"2026-09-06T06:42:34.685005Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dd2ed82153d7a6f2e7b20ff77b39299","sha1":"20e47478b872522b1aeb94b0acbd6e0881293880","sha256":"fb24410d179c2697fedfee179ac78e0611a3a21e602dd0a216a6529e26cf0a4d","sha512":"043621c445f6cc62174f750dd93228b726a1f984c89ef4dbbc24be856af9aca97250e2914c48bfef7be7b1e0956a07564e50ab3a757771a35173b9c1bc143230","ssdeep":"","tlshash":"c3c022e4e0909530004900d93037c3a87831204839d27080888d740c4a20ec31422cb4","size":193,"data":"","first_seen":"2026-09-06T06:40:02.976065Z","last_seen":"2026-09-06T06:42:34.685565Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/js/js.js","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f5c96d0bdb25753c4541e4ccc67c77f","sha1":"2c8fb14cf40e32e7eeecde5193d59d375002ee6e","sha256":"06d6f44b6e23e51aeab4295b19f107f7b27f8bb25840e78e395f63da06acac37","sha512":"e37851880c1d3fd72036bb70544fbcaaa917cb8bb4bc4475eadef51ca72dbc33ef9005f85fbacc6a9b6b3bd82fbb6872b80dbe4e9252108f3263a178f07780dd","ssdeep":"48:GzKXJTirfUXvG16W+f/sJqWnDJTW4RR9/BqnFBlcx+aGqMV86NIS6qDVw6NOW+K3:K/DcvIXZV9y4f2s3+8WdNr7nwjusOOA","tlshash":"91c172a191f108b1009742ea93a25bc93e20a307e9069b4af97ddbe01f90d01f57fec9","size":5884,"data":"","first_seen":"2026-09-06T06:40:02.945336Z","last_seen":"2026-09-06T06:42:34.677849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"962703ea060aa5b946106d081d0351a1","sha1":"edd9fc92e58d58f49e4aa7b59c9e8ce9e50166f6","sha256":"c2c2b9d5c4f6d332a8a3382b72df90b5b84a68c2301ded0b81408b62848a6768","sha512":"a108ae1e66178a490285a485613a0cadb9816e7667888259e415dabb24a96cc5b5c16bf11641e36ad53ac09f1be8932368c18d441f54793ae96e0b37695903a2","ssdeep":"","tlshash":"f9c04cd9eb103976af68748e5b1d13927dc4062e6a3a1d067b8870a06ed503a4141887","size":145,"data":"","first_seen":"2026-09-06T06:40:02.982076Z","last_seen":"2026-09-06T06:42:34.686527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6842ec2bdbd246100d5ba491b6debed3","sha1":"29e3d78612fca79c2665589d2257147393539146","sha256":"2f7e95c0c4b524732bc3c255a24125d8f5d5f12b358e9f5e251805db6b7314ee","sha512":"8149962eeee4d2ffb0b2f27f3c033bc41d29ac01a36c0f68794be8e56076616dbf3ed9f665a8860777378f6223c486e59c83a641508b2875dffeb53e8e2788c5","ssdeep":"","tlshash":"0b8108ba9e9062786e63b09e927ab2613d20c10b0c00cc45fddcfa115fa0ed44dbaec1","size":3981,"data":"","first_seen":"2026-09-06T06:42:34.687141Z","last_seen":"2026-09-06T06:42:34.687141Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/public/external/check.php?it=4454953\u0026time=1788676947245","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-06T08:16:19.960597Z","times_seen":3536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90ff828c89995a92e2c79bda981bad60/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fda3ed1e20fd3dbdbd3c9174f1800f6a","sha1":"a916e9e0fe454f1e7c0f962e17bbf97adc488ba3","sha256":"a9c4d567ed7c9e2b71dd49c97185029e5dfd8cfba6bc04a552c93a435cf6cb21","sha512":"6c161d5d52cc952158e98d6c1cfa6b0bf50d67aa8788960f49f0d185f16c2ea6f26d9fb5f62a257a9bd659ac9b8a54a79261f5380eec31029bfa3a6978e5f108","ssdeep":"768:5Zci1XerBzdkgAp8PIzvM6/pOQo83hN1xQ3L6gGh5XhVEZMRTjTWuVq5Amzy3iyJ:0i1uDRMdyZoTBqVyWXfIxJ6myN8ZjSha","tlshash":"1723f9cb7f90906413b1a9f3732ba939e549dd15b58cd4c8f07d28886f63362ec36628","size":49037,"data":"","first_seen":"2026-09-06T06:42:34.669111Z","last_seen":"2026-09-06T06:42:34.669111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"b92e512f93a40de85e5610932da6e1ed","sha1":"9a3625c95a85ad7feb9564db0c459e5d225c1687","sha256":"62a2bfbbe5108c507a0955443f025775f12be4953880ca5a4c7890f9e5373b62","sha512":"f16be4397dd8cf060c42350e0dba498b41ec932a6af84d19e76f81d0e6c1f8078e48f59ccae14e9a339119799fbdff698e97dc374016b41ead9f3bd7c9df7dd1","ssdeep":"","tlshash":"6a31b57fe26036aa8e6af0a7d3cbb3f12e54d40a4c00c5c1f9a16b6418908cd0cbb6c1","size":1489,"data":"","first_seen":"2026-09-06T06:42:34.688125Z","last_seen":"2026-09-06T06:42:34.688125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/hpw3Y9SdT1I.4454953.df7eb.0.js","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10f195cf4598e8c773dbe1fa9fe2a3de","sha1":"2ba765a7d409c6bdbc7778af4998dd0572b7648e","sha256":"5a3b2381def26b586aa16f939f9f2dfc0585b84dfdd7bf4f3a10d4cb2c2fc42b","sha512":"52170fff3f6330c8e385d5a5128008e12b07050ccd793b4a9e9529543778d1475331d37e8b37c5aff471094a28ac79f7b6ff021ec30936cff98e6edb78b7c0fd","ssdeep":"384:MGwWVx06FNMElWE9WzK6gB+0DQ7dlB8w04vcswaw3wmhwewXwu:MEVx0Kem6gB+kw04vcDxgmylAu","tlshash":"b942f8e7b951d429f3928c1d72ff0eb9a845342481c2f6b4fa4de52c07ce4f85ae2694","size":13162,"data":"","first_seen":"2026-09-06T06:40:02.980107Z","last_seen":"2026-09-06T06:42:34.689016Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/public/external/check.php?it=4454953\u0026time=1788676931747","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-09-06T08:16:19.960597Z","times_seen":3536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duw03nk63ml3f.cloudfront.net/b97820b.js","fqdn":"duw03nk63ml3f.cloudfront.net","domain":"duw03nk63ml3f.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b94ddaf5314bb49deec7c31316d7a363","sha1":"9053000c2ce886c75b21b3872b822cc1609a862c","sha256":"69a93a3114bad62633241b19555906f994925bb1ec6ed246720304d3fecb84fb","sha512":"44f49a59f4842bf4c583121420ad43e1121dac50cd1437b580d8995d77d11319878ea330ff1c66882e4634acc02c2de2fa1373c736f526b4810eb7214b20b84c","ssdeep":"768:n5f2T236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:z3Z7OZ1h2ayQgM","tlshash":"5bc2535aab6a1809867763b9df1f5208f575432f1512c119bc7c88d85fb0d3842aaffc","size":27325,"data":"","first_seen":"2026-08-25T17:58:20.627952Z","last_seen":"2026-09-06T08:16:19.961775Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.153222152133.js?dev=e\u0026fstu=01a07573-b973-741a-8f3f-84f081ebf249\u0026key=90ff828c89995a92e2c79bda981bad60\u0026kw=%5B%22efootball%22%2C%22coins%22%2C%22for%22%2C%22free%22%5D\u0026ps1=1788676913\u0026rb=e\u0026refer=https%3A%2F%2Fbnstore.xyz%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=UrzWTFxAaZ6lZNgBLw34EKADsNYAEdFOnBDkMk4j2-0\u0026shv=2\u0026st1=59a3a7f2ba7326475f4c2ea6f2514487\u0026tz=0\u0026uuid=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.542Z","timestamp":1788676913542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.153222152133.js?dev=e\u0026fstu=01a07573-b973-741a-8f3f-84f081ebf249\u0026key=90ff828c89995a92e2c79bda981bad60\u0026kw=%5B%22efootball%22%2C%22coins%22%2C%22for%22%2C%22free%22%5D\u0026ps1=1788676913\u0026rb=e\u0026refer=https%3A%2F%2Fbnstore.xyz%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=UrzWTFxAaZ6lZNgBLw34EKADsNYAEdFOnBDkMk4j2-0\u0026shv=2\u0026st1=59a3a7f2ba7326475f4c2ea6f2514487\u0026tz=0\u0026uuid=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bnstore.xyz\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.80hWY9VofK3bii2FppiS-w7Rxo6fOc4zgrbaC-cHZ_s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 06:41:53 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bnstore.xyz\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Sun, 13 Sep 2026 06:41:53 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\npdhtkv32=true; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\nuncs32=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\nu_pl28014334=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 18\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 882d1fa66e18f3982c9b03d8300b3152\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a07573-b904-7d90-9cc4-57a421181b5f:2:1","quoted":false,"path":"/","expires":"2026-09-13T06:41:53Z","raw_expires":"Sun, 13 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Sun, 13 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"pdhtkv32","value":"true","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv32=true; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"uncs32","value":"1","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs32=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"u_pl28014334","value":"1","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28014334=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4013,"size_decoded":4189,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3137)","md5":"1567f8a92067cd965db6ff5d14dc1c7f","sha1":"2118ca47ef38e3b217197bab4983b594f37a247e","sha256":"c1ab197900528abf183613e56906311ff95cf8bc3fbc7372418c2f3f2d633166","sha512":"d5245dc08bf588ebe473ab6fad512d9cbd1f44d3fd492525a758c5d8adf84d521c2026078b4708b0ed24a1f3d6acd6ed39be8fff1f50b13723f74d0996d43062","ssdeep":"","tlshash":"5d8108ba9e9062786e63709ea27aa2613d20c10b0c00cc45fd8cfa151fa0ed55dfafc5","first_seen":"2026-09-06T06:42:34.666263Z","last_seen":"2026-09-06T06:42:34.666263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.181.132.243","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.318Z","timestamp":1788676913318,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bnstore.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bnstore.xyz\r\nset-cookie: uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Wed, 03 Sep 2036 06:41:53 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a07573-b904-7d90-9cc4-57a421181b5f:2:1","quoted":false,"path":"/","expires":"2036-09-03T06:41:53Z","raw_expires":"Wed, 03 Sep 2036 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Wed, 03 Sep 2036 06:41:53 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":514,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c0e0768225a7862d6d83318ae846666a","sha1":"da47a68e56cb804343a3f0c1fc3995426a18ca93","sha256":"3cd69a3275f54ab79193bb2e7d0db5cdfc70702d924e61fb45ac9e8f74273c0c","sha512":"7956044788ba84718e12719c687fb331db63d17c5424d3b3eab7e6b4880699532a91a50a6fec301628fb31197db1174b597a1a8222e7701ac717420675078d10","ssdeep":"","tlshash":"0b9004011501dd15374d3f313553cfc17530034131551501150f45550701731170dd40","first_seen":"2026-09-06T06:42:34.667657Z","last_seen":"2026-09-06T06:42:34.667657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":5,"connect":24,"send":0,"wait":25,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ldrws.com/401/10573762?oo=1\u0026sw_version=v1.903.0-s\u0026oaid=x4wm255372kp747747234d2s2pvvi889\u0026st=true","fqdn":"ldrws.com","domain":"ldrws.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.773Z","timestamp":1788676913773,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /401/10573762?oo=1\u0026sw_version=v1.903.0-s\u0026oaid=x4wm255372kp747747234d2s2pvvi889\u0026st=true HTTP/1.1\r\nHost: ldrws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3338\r\nOrigin: https://bnstore.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T07:58:43.680155Z","times_seen":18306026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/90ff828c89995a92e2c79bda981bad60/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.852Z","timestamp":1788676912852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 23:52:39 GMT","end":"Wed, 04 Nov 2026 23:52:38 GMT"},"fingerprint":{"sha1":"B8:83:42:30:01:F1:50:DF:BA:43:AD:F5:FF:7C:75:43:E4:F3:14:B8","sha256":"06:90:24:D1:9F:9A:3E:F1:28:CC:2D:B9:77:E8:06:2F:0D:9E:37:96:BE:CB:04:A2:6B:68:B2:4A:66:04:FE:87"}}},"request":{"raw":"GET /90ff828c89995a92e2c79bda981bad60/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 06:41:52 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_0c5c7d4a4231a55c4b3cff33aa2cc74e=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:52 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c007c775cc97027988e8702a715518d0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_0c5c7d4a4231a55c4b3cff33aa2cc74e","value":"1","quoted":false,"path":"/","expires":"2026-09-07T06:41:52Z","raw_expires":"Mon, 07 Sep 2026 06:41:52 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_0c5c7d4a4231a55c4b3cff33aa2cc74e=1; Path=/; Expires=Mon, 07 Sep 2026 06:41:52 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":49037,"size_decoded":21420,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49037), with no line terminators","md5":"fda3ed1e20fd3dbdbd3c9174f1800f6a","sha1":"a916e9e0fe454f1e7c0f962e17bbf97adc488ba3","sha256":"a9c4d567ed7c9e2b71dd49c97185029e5dfd8cfba6bc04a552c93a435cf6cb21","sha512":"6c161d5d52cc952158e98d6c1cfa6b0bf50d67aa8788960f49f0d185f16c2ea6f26d9fb5f62a257a9bd659ac9b8a54a79261f5380eec31029bfa3a6978e5f108","ssdeep":"768:5Zci1XerBzdkgAp8PIzvM6/pOQo83hN1xQ3L6gGh5XhVEZMRTjTWuVq5Amzy3iyJ:0i1uDRMdyZoTBqVyWXfIxJ6myN8ZjSha","tlshash":"1723f9cb7f90906413b1a9f3732ba939e549dd15b58cd4c8f07d28886f63362ec36628","first_seen":"2026-09-06T06:42:34.669111Z","last_seen":"2026-09-06T06:42:34.669111Z","times_seen":1,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":28,"receive":37,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/img/banner.jpg","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.861Z","timestamp":1788676912861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /img/banner.jpg HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/jpeg\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\netag: \"15f9610cb0b88c5da3d3ac5d18afbce9-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M1TQ7DQ9YF2R551DB9J9P0TG\r\ncontent-length: 69261\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69261,"size_decoded":69678,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x512, components 3","md5":"bcb94a3d7e90450581bf77f3ab1723da","sha1":"48f960e5ffbb28b4c2d41812a327d3cb91f5992b","sha256":"0b55a031f7e3a44dde103aa00c7948958030046751cf76558262bda97f23322c","sha512":"b31dbc7597e083d18587e497d00061209475cb03f6ca533652c5ccdad3f0e79d26bb6ccebd418cdd97cd7184f02e710f882e8a3a525116292147bfd22b889d3a","ssdeep":"1536:qES+HR9aiR3X6RnzxJzHk3y9tRQhoIQCAVco959g0Y+eB1:qES0DnozxJzHpjmQXb7YvB1","tlshash":"7263f03e02b8adc3c1ad377654428735fd7b7e01e4141416d2d20e833a6b5bae5e89eb","first_seen":"2025-08-24T08:07:28.456349Z","last_seen":"2026-09-06T06:42:34.670011Z","times_seen":4,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/font/Lovelo%20Black.otf","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.297Z","timestamp":1788676913297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /font/Lovelo%20Black.otf HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\netag: \"e85174d59ea56355294aee3af8dfbd44-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1TQ7E4WBDXJSKPS3RPZRJAW\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33284,"size_decoded":14068,"mime_type":"font/otf","magic":"OpenType font data","md5":"fca6bef8196d52c13747ce50730c5ea2","sha1":"487b4e74c501d521b297ae236b586d4fbbe85352","sha256":"c41486f154206865877f0123e9cec36b30e931efd9b42afb5150bc5cdbebab91","sha512":"0d921d06d1b2dc4f679b8768e6c6f464196f2ffcda88463c9938776ba42dc8d1e616b150b0942016362cdd4728636323e6cb15065ffe3a82e43ddd9afaa9f9a2","ssdeep":"768:YdZ6Vsz3Jb9mko6J1RMZ48hXb/ayk5Wwc5QGs2W:YdcKTRhr78X7ap8vfs5","tlshash":"79e2291a7609cf3ee99a2f32f8db0312123e7c56d946d59604e311646c35ef9489bb0f","first_seen":"2024-08-19T20:29:03.040471Z","last_seen":"2026-09-06T06:42:34.6709Z","times_seen":15,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/font/cruyffsans-medium.otf","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.298Z","timestamp":1788676913298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /font/cruyffsans-medium.otf HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/css/css.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: font/otf\r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\netag: \"e5bab7e350820fa1434364cebe3221df-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1TQ7E4XZXVXYMPV9XAXB6HS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":122824,"size_decoded":71959,"mime_type":"font/otf","magic":"OpenType font data","md5":"9fd5ad1e771f30ebe49654a5c9625896","sha1":"9da8b2b1bc9665cecb793204a4d2341631c32d4a","sha256":"eec55952319c18768868f916880e58e037101964338c4fe851a1f459e6239135","sha512":"deb366aa88d81d9be9b52582be71475f37d837761996564856be307efaf9c87ba60663466dc896f7b03e057751892be48cae3f0d27227acd62cca2deeb397395","ssdeep":"3072:VmgJRsPhMbixBkkuJ8s3ZiGi/RKFHWHdt:wgJ6qbi3ZW8ki9/4WHdt","tlshash":"67c38c50f746870ada428e70ae77c73073233e369f6e820bf9d3b15468d61a58e726d1","first_seen":"2025-08-24T08:07:28.407779Z","last_seen":"2026-09-06T07:30:26.671985Z","times_seen":16,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/img/coins.png","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.983Z","timestamp":1788676913983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /img/coins.png HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1; _ga_FB3NRDELDP=GS2.1.s1788676913$o1$g0$t1788676913$j60$l0$h0; _ga=GA1.1.1687328844.1788676914\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/png\r\ndate: Sun, 06 Sep 2026 06:41:54 GMT\r\netag: \"28acb664ab6b7f4150b8165180a1487c-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M1TQ7ETBSK67VV7ZBN7FK8KC\r\ncontent-length: 1492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1492,"size_decoded":1907,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a213d0a68d29d3dd88c87b5f99a3b417","sha1":"abf98fcb7aab6d5ae9747d990c09293f4791b666","sha256":"3fd83f46ab8c748a0839bc3b4553f413e4ae5840d079e2818ed056cec0ea65db","sha512":"bbbf697d1ac9e02ece32d5f84a8a376e1a8e227b4fcf9f519d5aa85a839c5ba05508a3c725beea7a304a80eb5b0ac7b07e62f4476172c99b5a1c627c13dc6666","ssdeep":"","tlshash":"b531f91e8e2d518efc7520867b63d9583f7ab5d8b470e5634acdc13352b096640b887a","first_seen":"2025-08-24T08:07:28.441857Z","last_seen":"2026-09-06T06:42:34.672053Z","times_seen":18,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-06T06:41:51.892Z","timestamp":1788676911892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\netag: \"9d3f19b19edd1deb392c811fea971563-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1TQ7CY3WWX40C10QKDXN129\r\ncontent-length: 2318\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":5658,"size_decoded":2796,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (666)","md5":"c829a522b203e46bcd2b9f9873267f42","sha1":"53136be441e9951629dd7df430916180da2df1e1","sha256":"088a50f229adf3a77c0a562255bdb1260f883aaab3112a83e7ab683e7874c6bb","sha512":"bae7c9a7af1e05524a08f11934a80abd31065611da0a535c6b492543cfdccdabd1331a6567979cb3cdba4d08c5e8d39fe95fd9fe2393f38ace33371f17850d5e","ssdeep":"96:bIe/pCCa3AuaXGVQiIIG0WTmzFnljAOIAycLg5PU8AM:bIyp6wuaWVJIp0m+/jAOAcLkAM","tlshash":"d0c1c7a26cf3a031905391f92fbab52e3d92b203ca458844b4fd6b444fd1ecacd17e95","first_seen":"2026-09-06T06:40:02.93659Z","last_seen":"2026-09-06T06:42:34.672615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":-1,"dns":102,"connect":27,"send":0,"wait":400,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"n6wxm.com/vignette.min.js","fqdn":"n6wxm.com","domain":"n6wxm.com","tld":"com"},"ip":{"addr":"104.21.12.76","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.319Z","timestamp":1788676913319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"n6wxm.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 12:52:22 GMT","end":"Fri, 13 Nov 2026 12:52:21 GMT"},"fingerprint":{"sha1":"D1:CE:55:C2:F3:8D:F2:32:AF:DC:BD:19:14:2F:9B:BE:D0:36:CF:CB","sha256":"26:12:42:75:29:60:3B:E5:73:DD:70:4F:FE:13:76:B4:BD:A0:32:4A:22:9C:3A:5C:72:01:3C:73:39:71:01:1A"}}},"request":{"raw":"GET /vignette.min.js HTTP/1.1\r\nHost: n6wxm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nvary: Origin, accept-encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 533\r\nlast-modified: Sun, 06 Sep 2026 06:33:00 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiMSLNUrF%2F6auCDH6PFWreSNFvfHTT9WF2eGs0KQLOakRYMBJxlzQ2pIsLOWSGpi9Enj7Mad3Llx%2BJXmXw%2BZl1tBa5B3vqxVVRnUjpQd8Fgg%2Fc4qu1Wgq0oI5vo%3D\"}]}\r\ncf-ray: a36b7d945faeb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168134,"size_decoded":70735,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e89e3228575908e31299671078eddc90","sha1":"804a2bbdf5614572a34058d6663a2f5ef706b67a","sha256":"0dc1ec5e3d7e7fdbd6518e14d4b897e541fbf1fb5a0ba223429f69cfd47b1a2c","sha512":"bc7f818c730537f25496a9d61070795a82f5ccc00f09d728454067ad5a86da27ca7afd2d78e0a457209104de0b4dc96b77b91144966761c09a483e89663f2d3f","ssdeep":"3072:L98sKfeC9/obfXajKYVSwC2tC2HhYTHHypOsls+0MG7KDRWn36/N07JeI2GBoGqV:58oa1OncLPWnK/N07JetDLJ","tlshash":"05f3194bf696b59907a39170523f850fb6276c90240f9f42e056d1a23a3704ea3fbedd","first_seen":"2026-09-06T06:40:02.951956Z","last_seen":"2026-09-06T06:42:34.673253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/47/b3/99/47b39994b130f963ec19bebb5a194e79/1781174117.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.2","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.850Z","timestamp":1788676913850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 02:32:58 GMT","end":"Wed, 02 Dec 2026 02:32:57 GMT"},"fingerprint":{"sha1":"0C:28:A6:45:71:D0:51:55:56:A0:1D:34:71:8C:C4:7C:16:5A:03:5C","sha256":"68:73:EC:1A:D4:78:3E:46:1A:F8:1D:99:8F:CB:9D:46:B9:0E:28:CF:C6:BF:14:EF:F5:90:39:D3:FF:5A:1F:5C"}}},"request":{"raw":"GET /cti/47/b3/99/47b39994b130f963ec19bebb5a194e79/1781174117.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23687\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:17 GMT\r\netag: \"6a2a8f65-5c87\"\r\nexpires: Tue, 08 Sep 2026 06:41:53 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23687,"size_decoded":24035,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:10 16:35:03], progressive, precision 8, 320x50, components 3","md5":"a00939334cad5796259546d8a8cf7ceb","sha1":"d685a3e5efb1ff3f4d254ff772053e814c8eae08","sha256":"819f23f958b13ad7623c8ac7dc200fbcd4e24feabfbbccc6be295dd1f9a7952b","sha512":"052b948c57d171190b0c4bc00374df06a4ac1e5750743be0ddd76ed2ee845f25b68db533a0bff1936ae31cc9dfcc5c1e556135f298a9b8be778d9323c269f7dc","ssdeep":"384:i6L9i61iS36L9i6tnQRLBQblHraW0HAcWExkoYue6H7kPVbSR:iwi61iSwi6tQiOtH3VYue67kxSR","tlshash":"1fb29e21b794ce22f4e0523a9450c787ab31fd886ab32b457dce78513f7a3a44e5e242","first_seen":"2026-07-02T17:48:05.253007Z","last_seen":"2026-09-06T06:42:34.67415Z","times_seen":155,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":39,"connect":21,"send":0,"wait":25,"receive":22,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/RGqTmddN/official-efootball-2026-cover-v0-yod7al8twaif1.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.3","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.862Z","timestamp":1788676912862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /RGqTmddN/official-efootball-2026-cover-v0-yod7al8twaif1.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 397293\r\nlast-modified: Fri, 15 Aug 2025 11:43:09 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":397293,"size_decoded":397660,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1080x1080, components 3","md5":"445843f52371aeaf5e2f6d146345cec8","sha1":"0e613769faa63a700cfd75c6684de42ae8ef9644","sha256":"cd08be9bfc2162dd21fdc6831fe8afd83f3aa827f22a4fe5c43be7fd61b7f634","sha512":"450256ae3dd76c48653b0001d76eaeeed8b3d3d34bfdc9dec34b893858030e876800af63ac5b0fa2f05c286fd2a110c3dacdd6c5503cf61a62df6374befb851e","ssdeep":"6144:l2OagmxMATiwnXNrRBwV6g1VfDvETZmGke/nNCALOZwqyRpjYAXK3qHn+QcdjD:0xMATigXtFkNzEt39/NCAUwqgY6pq","tlshash":"048423e76850b0dd389e6344f8c38d8dbe648b9444daab3f63261ecaff51345589c05b","first_seen":"2025-08-24T08:07:28.439112Z","last_seen":"2026-09-06T06:42:34.674608Z","times_seen":4,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":13,"dns":0,"connect":27,"send":0,"wait":29,"receive":207,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wow-l.com/bb9/29aa9/mw.min.js?z=10577713\u0026sw=/sw-check-permissions-711e6.js","fqdn":"wow-l.com","domain":"wow-l.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.988Z","timestamp":1788676912988,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /bb9/29aa9/mw.min.js?z=10577713\u0026sw=/sw-check-permissions-711e6.js HTTP/1.1\r\nHost: wow-l.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T07:58:43.680155Z","times_seen":18306026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"wow-l.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/img/bc.jpg","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.993Z","timestamp":1788676912993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /img/bc.jpg HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/css/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-type: image/jpeg\r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\netag: \"e54e5f613eca9202cfcb1d947ca55029-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M1TQ7DVCRPD5Z73KDJGMHGKF\r\ncontent-length: 155022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":155022,"size_decoded":155440,"mime_type":"image/jpeg","magic":"PNG image data, 640 x 1296, 8-bit/color RGBA, non-interlaced","md5":"8fdeaa02e1f26620f4928af971108202","sha1":"76b5e076b4082028322fe314d3f5ed09eb731016","sha256":"d09385304f476bb4ea8d29a31303daf048df3a691085d68d9d9f0e60bf3d7e64","sha512":"6e0cb9cad777bc11d74e8b6976a084483e09d5943c1925d8bd531b1ed898e82850d7bc46d82c091e3e75b05cbc3a85a21a1a2757eef1f82acb6a4cb273fd6ece","ssdeep":"3072:gEPnlwh7SqOad4ru31zX8qOqZy/uEnqnaiph7ilWyzC2gYvwi2x733b8ngVpRxFL:gEPnlwF6r8eqOqw2EnqnaiTF4CW40gRj","tlshash":"42e312ea5747dc0bcbd2806426314f777117651a1ab204bb04eec2cea752a8f49f16fa","first_seen":"2025-08-24T08:07:28.404391Z","last_seen":"2026-09-06T07:30:26.668955Z","times_seen":6,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1ySPWwcRRTHZy8RTQokFJCQENqCAqTceWY_bneTLuKjioOSoBRU87FzTLy3s9nZvbtc5WBE7RRINEjr_9lxESlAQ43OdJGQcp2LuKGmAlEiZOeECVO892b-TzPvP_p9vdeekAFafvzpDTs3RcE34gH1379rSmWnzt-84zM6oNf8u6YcRtf82WmoJ1dZGA3oB_4nudyyGwFllDLK_I9NnWs72zhTYaqnLIsHw2jAWDpgcYBZ_f8T13pw3IOanJA3YNTq9d_05zByiXL8w4e522psdeWjcVvwxtaYqMPPyq3STkuMz0tde9Dl4bob1q0I-bYHWx6uXcBO9k9dQJgV6b31AqI8XI8KMTl4Oa0okJcQ6hKmkyXy4giGLyHtDox6TgCpsHkT5fjxpq2n_MFLlZ-qK3Lxrz9gpity8cVllOOn1wsz82_bom2MLR1muoOZLWFGS1TtEZp5D2Z6BNl8CaN-JbT3LsrxwQ3e1hxGHb9HGadJnIR9kdGon6iM9jMpo36c8ChgLGUi1md_ZPQS3PXQOg-t8dDqHtqqh7E69nmWapENI57lOtGKskTyOAyzJIoDPZQxWvkQRu1C1tuo6m1smUfP334Cpzy4hmCiugNVuMB1j1XhWsHWOVjnsFvYZrTHD2wzyksCXu-iVt2-qe67HcjmwmKunVrY08BF0y24UN3CqIagvv-KxyzpJ2Ea9EWQR3065CnjCadayX3tmvaV1iTsJxHj_VSHup9GmqYsFzqIsr1qzY_3ZPI3tvJjP6Nap0Eq0yzLYp4FeSCTTCiepUxwNaRwpoNxPXDnYW5W5NazDVRmRQZDBsGP4IojSPMOeOuDTxdhQMG_QEwxL7-vc2mqXBTWjge2HkHZDlVzEc0DD3lD9ooTcnlx6871n8_w0INvkMtnZL0g6w5V3eGe-YVgVDz88WbVmLGZ81Nebje8yV8DNyviXXgEaVbkzT93ztC9OvodstqGq_69a1G4akX0T1fgLIGoCApDUOTnj3HRwf1nL87rPfcVRrUHUXgLUdRkXxR1sQtnjv00CCiVLMhUFkdZmOo8jliS5DELhzkNYzRude-7S-yfAQBOQrJUQAQAAA==","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.852Z","timestamp":1788676913852,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1ySPWwcRRTHZy8RTQokFJCQENqCAqTceWY_bneTLuKjioOSoBRU87FzTLy3s9nZvbtc5WBE7RRINEjr_9lxESlAQ43OdJGQcp2LuKGmAlEiZOeECVO892b-TzPvP_p9vdeekAFafvzpDTs3RcE34gH1379rSmWnzt-84zM6oNf8u6YcRtf82WmoJ1dZGA3oB_4nudyyGwFllDLK_I9NnWs72zhTYaqnLIsHw2jAWDpgcYBZ_f8T13pw3IOanJA3YNTq9d_05zByiXL8w4e522psdeWjcVvwxtaYqMPPyq3STkuMz0tde9Dl4bob1q0I-bYHWx6uXcBO9k9dQJgV6b31AqI8XI8KMTl4Oa0okJcQ6hKmkyXy4giGLyHtDox6TgCpsHkT5fjxpq2n_MFLlZ-qK3Lxrz9gpity8cVllOOn1wsz82_bom2MLR1muoOZLWFGS1TtEZp5D2Z6BNl8CaN-JbT3LsrxwQ3e1hxGHb9HGadJnIR9kdGon6iM9jMpo36c8ChgLGUi1md_ZPQS3PXQOg-t8dDqHtqqh7E69nmWapENI57lOtGKskTyOAyzJIoDPZQxWvkQRu1C1tuo6m1smUfP334Cpzy4hmCiugNVuMB1j1XhWsHWOVjnsFvYZrTHD2wzyksCXu-iVt2-qe67HcjmwmKunVrY08BF0y24UN3CqIagvv-KxyzpJ2Ea9EWQR3065CnjCadayX3tmvaV1iTsJxHj_VSHup9GmqYsFzqIsr1qzY_3ZPI3tvJjP6Nap0Eq0yzLYp4FeSCTTCiepUxwNaRwpoNxPXDnYW5W5NazDVRmRQZDBsGP4IojSPMOeOuDTxdhQMG_QEwxL7-vc2mqXBTWjge2HkHZDlVzEc0DD3lD9ooTcnlx6871n8_w0INvkMtnZL0g6w5V3eGe-YVgVDz88WbVmLGZ81Nebje8yV8DNyviXXgEaVbkzT93ztC9OvodstqGq_69a1G4akX0T1fgLIGoCApDUOTnj3HRwf1nL87rPfcVRrUHUXgLUdRkXxR1sQtnjv00CCiVLMhUFkdZmOo8jliS5DELhzkNYzRude-7S-yfAQBOQrJUQAQAAA== HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyODAxNDMzNCwiayI6IjkwZmY4MjhjODk5OTVhOTJlMmM3OWJkYTk4MWJhZDYwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NDI1OTY3LCJwaWQiOjMwMjg1MjksImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjgsImFpZCI6MzIsInB0Ijo0LCJwayI6InkzOXQ4OXA3IiwiY3BrcyI6eyIyOCI6IjBjNWM3ZDRhNDIzMWE1NWM0YjNjZmYzM2FhMmNjNzRlIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9ibnN0b3JlLnh5ei8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.80hWY9VofK3bii2FppiS-w7Rxo6fOc4zgrbaC-cHZ_s; pdhtkv=true; uncs=1; pdhtkv32=true; uncs32=1; u_pl28014334=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 06:41:53 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+b7686ea929ed941edc444e2bb09b6d7e=1438851; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1fa5bcd96a5b190fa952fd42cf7aae5f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+b7686ea929ed941edc444e2bb09b6d7e","value":"1438851","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+b7686ea929ed941edc444e2bb09b6d7e=1438851; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-09-07T06:41:53Z","raw_expires":"Mon, 07 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 07 Sep 2026 06:41:53 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T07:58:43.680155Z","times_seen":18306026,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/public/clockers/PrimeApps/cssXF.css","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:54.181Z","timestamp":1788676914181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /public/clockers/PrimeApps/cssXF.css HTTP/1.1\r\nHost: dtvpp42hfuyb2.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 1804\r\ndate: Sun, 06 Sep 2026 06:41:54 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:48 GMT\r\netag: \"70c-60316181d3e1c\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 adec45310b695a0da9995003556ee7ce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: DSOM4J15SHfikNigmC49NceBjk1Tl96WqghUILSxBPC2AXqJdV87vw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1804,"size_decoded":2271,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9be74b455cf7e0b6fc1461ba3d9ad01c","sha1":"f1fa072d9874b423fd003efeffcd128e174d88ca","sha256":"e6959d5cfed508bcc278587c05b26b361bc678f8a7f0502ca6f8ce01f2838cd5","sha512":"6269145c9f99746b9135c994e118582b5219ff98a20ebe50e57d27a14f7859bc085c063002e86f718e301197d53a73275f3544915c1a1a3416adaf9669767182","ssdeep":"","tlshash":"51316a3eae72594f41b9861126f7d21ba5bc515f0a30af7d7a20360a1f261bd2073fd8","first_seen":"2023-08-26T19:01:26Z","last_seen":"2026-09-06T08:16:19.968707Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.846Z","timestamp":1788676912846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 14850\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 443239\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmYzSzwcvPf2DmUwFdv0y25UoXdpYLj4lGdmN94jHYxJ%2FpSTJx%2FzqpntZQkq0RGtl83Gdd9ZMC2oyUwQzGZ28dAoreFEDDgoMdDEBz4ZI7hh0Sld1cRPCWpsM0175JYpsvFZP71N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a36b7d916da95690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83981,"size_decoded":15852,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-09-06T06:42:34.67682Z","times_seen":21903,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"duw03nk63ml3f.cloudfront.net/b97820b.js","fqdn":"duw03nk63ml3f.cloudfront.net","domain":"duw03nk63ml3f.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.18","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.849Z","timestamp":1788676912849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /b97820b.js HTTP/1.1\r\nHost: duw03nk63ml3f.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nserver: AmazonS3\r\nlast-modified: Tue, 25 Aug 2026 10:03:11 GMT\r\ncontent-encoding: gzip\r\ndate: Sun, 06 Sep 2026 06:30:48 GMT\r\netag: W/\"b94ddaf5314bb49deec7c31316d7a363\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 d89e87cdae3d84d31773ec1e164f25ee.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: wWvVpe_r8BexlT-t3c0485xWuRLDLntvIKXmJlzeyzC0JgIuvTRA2Q==\r\nage: 768\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27325,"size_decoded":8177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"b94ddaf5314bb49deec7c31316d7a363","sha1":"9053000c2ce886c75b21b3872b822cc1609a862c","sha256":"69a93a3114bad62633241b19555906f994925bb1ec6ed246720304d3fecb84fb","sha512":"44f49a59f4842bf4c583121420ad43e1121dac50cd1437b580d8995d77d11319878ea330ff1c66882e4634acc02c2de2fa1373c736f526b4810eb7214b20b84c","ssdeep":"768:n5f2T236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:z3Z7OZ1h2ayQgM","tlshash":"5bc2535aab6a1809867763b9df1f5208f575432f1512c119bc7c88d85fb0d3842aaffc","first_seen":"2026-08-25T17:58:20.627952Z","last_seen":"2026-09-06T08:16:19.961775Z","times_seen":76,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":13,"connect":8,"send":0,"wait":358,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/js/js.js","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.853Z","timestamp":1788676912853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /js/js.js HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\netag: \"0dd882452c99cb2bebc3ad739db2b6ee-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1TQ7DQ0RYYGZPWCX5EGCFAY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5884,"size_decoded":1738,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"5f5c96d0bdb25753c4541e4ccc67c77f","sha1":"2c8fb14cf40e32e7eeecde5193d59d375002ee6e","sha256":"06d6f44b6e23e51aeab4295b19f107f7b27f8bb25840e78e395f63da06acac37","sha512":"e37851880c1d3fd72036bb70544fbcaaa917cb8bb4bc4475eadef51ca72dbc33ef9005f85fbacc6a9b6b3bd82fbb6872b80dbe4e9252108f3263a178f07780dd","ssdeep":"48:GzKXJTirfUXvG16W+f/sJqWnDJTW4RR9/BqnFBlcx+aGqMV86NIS6qDVw6NOW+K3:K/DcvIXZV9y4f2s3+8WdNr7nwjusOOA","tlshash":"91c172a191f108b1009742ea93a25bc93e20a307e9069b4af97ddbe01f90d01f57fec9","first_seen":"2026-09-06T06:40:02.945336Z","last_seen":"2026-09-06T06:42:34.677849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtvpp42hfuyb2.cloudfront.net/public/external/css_frontXF.css","fqdn":"dtvpp42hfuyb2.cloudfront.net","domain":"dtvpp42hfuyb2.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.216","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.272Z","timestamp":1788676913272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 25 Aug 2026 00:00:00 GMT","end":"Wed, 10 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"5E:9C:8C:03:23:F3:2C:16:F1:D3:F8:2D:AE:8E:8E:2D:88:E9:60:56","sha256":"BB:D2:A7:53:57:A1:50:6D:AC:51:47:E7:F1:6F:3E:26:93:2E:AA:72:59:0F:B9:AA:5F:E3:C3:E3:99:D6:69:2B"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: dtvpp42hfuyb2.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Sun, 06 Sep 2026 06:41:53 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:51 GMT\r\netag: \"17f6-60315f0f18c9f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 adec45310b695a0da9995003556ee7ce.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Kzu37BRPF9zyF8x1PMXlmcYxWajFUJob_mc18T3Fc7B-Rq8K2eSMhA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6134,"size_decoded":6602,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-09-06T08:16:19.973657Z","times_seen":3429,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":17,"connect":11,"send":0,"wait":186,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:54.796Z","timestamp":1788676914796,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bnstore.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 454\r\nOrigin: https://bnstore.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 06:41:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T07:58:43.680155Z","times_seen":18306026,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":25,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bnstore.xyz/css/css.css","fqdn":"bnstore.xyz","domain":"bnstore.xyz","tld":"xyz"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.844Z","timestamp":1788676912844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bnstore.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 10:17:07 GMT","end":"Sun, 29 Nov 2026 10:17:06 GMT"},"fingerprint":{"sha1":"D0:52:47:77:EB:B4:D9:F9:8D:83:35:63:E7:3A:A2:12:BB:C4:9A:37","sha256":"24:22:E5:57:1B:AF:D5:20:20:CB:1C:3A:FB:72:AB:D8:8E:95:9C:26:CB:56:5A:35:3C:C7:09:AD:75:0F:6E:CD"}}},"request":{"raw":"GET /css/css.css HTTP/1.1\r\nHost: bnstore.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss; fwd-status=200; stored\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\netag: \"1fe3abc05fc85e305d5816b54d9e0e7d-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01M1TQ7DPQDYH1PNRMJ1RWC051\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":13231,"size_decoded":2838,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"21949c92a6c202741e34c37bd35dafd9","sha1":"98fa0e4e4043a72b775a01d7bf99ac7194d2d3b7","sha256":"469fc8c5f7b37eef1bba7608d49073390ef148f01873720e400071f74a0803cd","sha512":"6d27f34d50a1dee09d6db8c72efd84eb23d61b58abd4fb3d9e2a1e9f25d83956efd731278f9b0f20626cabf91d9db7e5b681c3c2a079fce74496600cd0926d2f","ssdeep":"192:FzaUCQiiBBjtBfUyDZyrgFhTW59GPzA1X2fFE9n6OdKQQuzBBD/qsQfrdyAuibNw:Fn9LFsiF1cHH5wC4kPFEaVmFHOFye1","tlshash":"1a52e18799932006b803e5783bba87516365d203d14ecd7e3e8d719ccf453989de6789","first_seen":"2026-09-06T06:40:02.959315Z","last_seen":"2026-09-06T06:42:34.678871Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-FB3NRDELDP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:52.848Z","timestamp":1788676912848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-FB3NRDELDP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 06 Sep 2026 06:41:52 GMT\r\nexpires: Sun, 06 Sep 2026 06:41:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 174000\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":520008,"size_decoded":174604,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"610a6a8a6e6d3b1c74371ae1450c962a","sha1":"1b432c1c3e897470f49e1759ab526705fcb96f77","sha256":"65144e92c7896a016db4ae9a0eae1eeb7e6bf8ea671f0063fed0cfb7d38ed3ad","sha512":"fa5d18bebf60fd9333ed0057976c6ca56b0b53d55df0b1c0926f333a22fa71a85f211c974922442db0bd9e0f988c2e490c10e2f14f8caecd122a05e1b736c352","ssdeep":"6144:3pO/1jihusz/QZBrRQ6OuhxizcHR/EEQv3sk70y5CY1vrztHo9L:3gAoZMcS0y5xvvSZ","tlshash":"07b408cd73c674229396f178903f018ba57b28a2b45cc89af289dce42d3469a5177f7c","first_seen":"2026-09-06T06:42:34.679546Z","last_seen":"2026-09-06T06:42:34.679546Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":38,"receive":48,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.153222152133.js?key=90ff828c89995a92e2c79bda981bad60\u0026kw=%5B%22efootball%22%2C%22coins%22%2C%22for%22%2C%22free%22%5D\u0026refer=https%3A%2F%2Fbnstore.xyz%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.4","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bnstore.xyz/","date":"2026-09-06T06:41:53.438Z","timestamp":1788676913438,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.153222152133.js?key=90ff828c89995a92e2c79bda981bad60\u0026kw=%5B%22efootball%22%2C%22coins%22%2C%22for%22%2C%22free%22%5D\u0026refer=https%3A%2F%2Fbnstore.xyz%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bnstore.xyz\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bnstore.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Sun, 06 Sep 2026 06:41:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://bnstore.xyz\r\nlocation: https://kettledroopingcontinuation.com/watch.153222152133.js?dev=e\u0026fstu=01a07573-b973-741a-8f3f-84f081ebf249\u0026key=90ff828c89995a92e2c79bda981bad60\u0026kw=%5B%22efootball%22%2C%22coins%22%2C%22for%22%2C%22free%22%5D\u0026ps1=1788676913\u0026rb=e\u0026refer=https%3A%2F%2Fbnstore.xyz%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=UrzWTFxAaZ6lZNgBLw34EKADsNYAEdFOnBDkMk4j2-0\u0026shv=2\u0026st1=59a3a7f2ba7326475f4c2ea6f2514487\u0026tz=0\u0026uuid=01a07573-b904-7d90-9cc4-57a421181b5f%3A2%3A1\r\nset-cookie: uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Sun, 13 Sep 2026 06:41:53 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.80hWY9VofK3bii2FppiS-w7Rxo6fOc4zgrbaC-cHZ_s; Path=/; Expires=Sun, 06 Sep 2026 06:42:53 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 814fb53010e3f2b91099a911294c6cba\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"01a07573-b904-7d90-9cc4-57a421181b5f:2:1","quoted":false,"path":"/","expires":"2026-09-13T06:41:53Z","raw_expires":"Sun, 13 Sep 2026 06:41:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=01a07573-b904-7d90-9cc4-57a421181b5f:2:1; Path=/; Expires=Sun, 13 Sep 2026 06:41:53 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.80hWY9VofK3bii2FppiS-w7Rxo6fOc4zgrbaC-cHZ_s","quoted":false,"path":"/","expires":"2026-09-06T06:42:53Z","raw_expires":"Sun, 06 Sep 2026 06:42:53 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.80hWY9VofK3bii2FppiS-w7Rxo6fOc4zgrbaC-cHZ_s; Path=/; Expires=Sun, 06 Sep 2026 06:42:53 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T07:58:43.680155Z","times_seen":18306026,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":4,"connect":19,"send":0,"wait":28,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-06","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}