{"report_id":"dc7a646f-2bfc-461f-b18d-81eabd952c9a","version":6,"status":"done","tags":[],"date":"2026-03-29T15:33:00Z","url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"104.21.89.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"title":"Opinion Eligibility Checker – Official $OPN Airdrop Claim | OpinionLab","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"104.21.89.90","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T15:33:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"opinionlab.digital","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-29T15:30:07.793719Z","last_seen":"2026-03-29T15:30:07.793719Z","alert_count":26,"request_count":13,"received_data":5138471,"sent_data":6192,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"opinionlab.digital/748045ca-8584-4c88-94a8-dc0f7a9bb75f","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-05-10T12:30:45.689857Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-05-14T18:46:37.015346Z","times_seen":645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/chunk.40.kyxaqcb0.js","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3048c023ba73480ec5938c0c27515b26","sha1":"7fcdb57f6f7b211c7fd3744e519f196411f68b2f","sha256":"58b4f52aeac9cc7fd0cb35d7598fabe8184e6176cd257429b38359d7baac5019","sha512":"ad8fa78abb7492ed4923b0b2a62caa72682b03f8c086a9b4f789fa44ff2cbcc0fa277993759b1f4a29f7f4aab0c192c1c168dbbb6be1f677ad2a05d7097f1be5","ssdeep":"1536:hM9xZQJGAxfwWm0QA4PWyNlsykFtOMvoI4tR1tvg/a1C33NK:hMtAlwgQf0t1vWRjvg/aIdK","tlshash":"a94402c5599695e5be0602decc72ed04e0584d13be6cf453aaeefdc17029f2280973ab","size":263641,"data":"","first_seen":"2026-03-29T15:30:12.064744Z","last_seen":"2026-03-29T15:33:02.55577Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d0fe669c2d52727aefb329a3405e8280","sha1":"7ca770462a783b22f474008abfaaefd551fb74fa","sha256":"59c945118be460f153a013d77727c80ddfedc3e3c79e0767a52eb5ddd52634ab","sha512":"298e5447c23b1e84a5717fa2d988e03c19864052fb1a9d69c522cc2a753937b9197236a152fd7abfec9393774882e390f74812a50003b35799cd95a11cc0a634","ssdeep":"1536:sS1OadqtZ0pGqufy+UJBSAmC8ZPKkHz+NnXTvg/aI5RRv:sS1OaWepGqufy+8Su4PJHSnXTvg/aO/v","tlshash":"02242de5db8784ec8e6512dec473f805e1544d23ce6cb493aa2eddc13629f66818327b","size":212645,"data":"","first_seen":"2026-03-29T15:30:12.068072Z","last_seen":"2026-03-29T15:33:02.559478Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-05-14T18:46:37.020518Z","times_seen":1296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"opinionlab.digital/banner.png","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /banner.png HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/d48eda8eed1b4b9e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 1114088\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: \"69c7f748-10ffe8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DG2eDED%2BE3iINGk0BorKjjs54dNYVsxiW6iE8PS2uqu2C%2BPd2FjwpfUXe3wGcwVIKPrMrUjw6n6g5z%2FQjxUMsO%2B4yK90XZx867IMYXef%2B5nu3zN%2BobJuZkHg6xluqTwfJ07K9jw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda46f7356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1114088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 900, 8-bit/color RGBA, non-interlaced","md5":"7f507604b33b6cb9e6967524ee11fbc5","sha1":"d71ce66054cb76169a544164c42dc7e3abd1095d","sha256":"e42494f2d65e3d0351c8eb148651617086caf10d711f7876fe2259c1412e4a50","sha512":"b7e48e71f8679fe1869b38ee87a1f5a365c740fc5d55944014b68f409df7982387045ed27dce549fd50f30ce36b6d2452bb1bf4f0d2581209274e35a224bc828","ssdeep":"24576:sA933gOORvDBLh+B4U4X3vT/I6hN30U5W2MPJ6x8GD:s233gOO362X3r/lhiU5WrIKGD","tlshash":"8f25337062b60811c26841fee4abf2451de039d5fb457a1a58f34a6aea38f15c4fe1cf","first_seen":"2026-03-11T01:38:40.249614Z","last_seen":"2026-03-29T15:33:02.535894Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/dc0d9adbac686440-s.p.3b382e45.woff2","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /dc0d9adbac686440-s.p.3b382e45.woff2 HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/d48eda8eed1b4b9e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 9464\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: \"69c7f748-24f8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkzOSVBOGWabMMyt5xMX%2BxP7VnDcAmUqRRuqKR60kMU%2BseJuMJdyvJeyMc2%2BAYGgWAUqmdWvwGl5evKIopBOxUkU0gbtGmnnlIFaSLpq6RLjaW86W9j30Qx5YUOgZ%2FfJ1yJvnOE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda46f7956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9464,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9464, version 1.0","md5":"d62e75a5cd2d7406d1c855ae5aac62d3","sha1":"e3c2c5620d1dbe722c46cdcaa48a5c110aafd5fd","sha256":"e0c8e616bda27642f4c3cebaecff6525d901e73afc8a227cbbb0f2af4810f300","sha512":"70f15c12474941097589814459814dee2946426f2ba130a7bead64715ba5d8ee244847c7816d88a005a99be5fe83dabe63704c9f1bb67c2b93d46cda1e4b8ab2","ssdeep":"192:8B46S7Y2ZfTL5HdcTJIrxdp7vYgxM1TOsRGfKDLLd8r:jx02fCTJIrpvYwM1TO0OKDP+r","tlshash":"6b12bf7f9b90839353179271f142d7265f888c1e183a60a6b9a776f48973489cb90e74","first_seen":"2025-02-16T13:10:52.334925Z","last_seen":"2026-05-14T21:38:21.915272Z","times_seen":648,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/Logo.svg","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /Logo.svg HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aIPxtnZLtLQ9N%2BGUrJmuU30sE5SNn%2Bvb0i6pgn2vf2pyfJWPhn1qNaqoGqawiaAWydM%2BFvAMEKHUQHZACi%2Fktz%2Fu3BNQCzKZSKPbp11ztyNlG7a%2FsL%2BuzBudEgD5QDGqi2nuGak%3D\"}]}\r\netag: W/\"69c7f748-28e1\"\r\ncontent-encoding: br\r\ncf-ray: 9e3feda4afb256b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79c280ee4fbebac05420ca5dda1a220d","sha1":"547a7e33102234f3264a09231be5547e2cb227b1","sha256":"5e516d0312e6c51bb53d3d6f84a287d0814f9f70969e690f4bb7b21013ff5d93","sha512":"226975216a32c268a59d372f85c33b0d30317ff58a6b468696146342bf91236712783b4fcef5b0e9df9cce90a4395db04d24241a4bbe77b59ac214c689aba89d","ssdeep":"192:e5PeNtL3/yqGsEWt/gVKrz9lcVeOdeGGatNbU64Yu95ZPYzzoyNFZaxPwf0sLkwT:e5+zisEW6V6z9lcloatX4d5ZA39fZwP4","tlshash":"862261de3714cde08e8aa7eebf16607da912d4f9ebd08a50c6489f0b348187c5c59dc6","first_seen":"2026-03-11T01:38:40.253288Z","last_seen":"2026-03-29T15:33:02.539246Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/icon-arrow-black-1.png","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /icon-arrow-black-1.png HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 425\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: \"69c7f748-1a9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WbX6L4T3%2BBs6YSx%2FC7sj7u0bW4qbAIKQ9dlGnh%2BTXRCV%2FlDZVQtlS1jv2bWVTtyPLwRs1WqDlT%2Bg2R9humE8yHClB0ePV8fj2qHCoMRpdhqxb5KkASDP3JcBUIIH3Fl4wChmu3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda4afb556b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"cb9e8cf07530eee46e09c72be33a69d1","sha1":"2c6c512fe031597d50f737036bd54dbc9976f94b","sha256":"f606e0a875688d36389cac6c4477e71d660b2e8b3e4a366a5806e23a0cf1c2e7","sha512":"77967f7d1a283854cfe91787de916adb894fab84ef1acec30bd7e119db59ffd7923d1f13c6da77769358724041570bbda6e5c2c899d12b35de6a51fddff1267d","ssdeep":"","tlshash":"42e0a3e3eb07745b8f0e24745d170454ef7d310b4664fa19e531582c9ebd45a19d7242","first_seen":"2026-03-11T01:38:40.256566Z","last_seen":"2026-03-29T15:33:02.542265Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T15:32:36.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:36 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nU7pQeF6sC0KaPJfE%2FplOGsVruypKIttZA9eDh4IPFGcHpDVWQVcCcx9iJpSmQZj%2B6Yl%2B%2B7Nu5IWsbfmKSVXI72tx9BvlvjRGGhY3B6F7eZ36abZvm1oiWimmI94rjB0BY4aDtw%3D\"}]}\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e3feda22f86568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21432,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3795), with CRLF line terminators","md5":"aba84aa3b53d01739b5b097ae4d69dc4","sha1":"7fad6c699b17f1fb0001e73f5cec9943500d7f42","sha256":"898a90c68d90768c434f31043d9fb601b4928011a1b09e1e3209b98bcd89c382","sha512":"513ef640897d6098a910286d4e04d747475a426009a04d5ee0dc2ae78e9b0c22220d04498d2974856fbf3c6c7f6d205320ea43e135b9bb615b79ee955a7651f2","ssdeep":"384:1MRZ6aGwWaoy/LFaOwf+HK14KYxfFVMkAozoCmv:1UZ6aGwWaoy/LMOPKSV9vzoCW","tlshash":"c9a2b621a2501637857f40bbbaf1df87e5314513ca0a2e643aece2436fbed528b77548","first_seen":"2026-03-29T15:30:12.056786Z","last_seen":"2026-03-29T15:33:02.543738Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/index_1.html","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGshp25eqpHrxvH8ppXpRRrFjV60CD3K7Osqr4Xn0S5sQLMcn3QIyhcWMtY148FuQtg7w%2BrLleqcKj8S30ixNDl4oj5mnlShXRD0PXvlQIGiNp1WMqzs5yLGDn2UnEcauPVBBQU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e3feda44f5956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1339), with no line terminators","md5":"76ad0bd94eacd4a55a53293e4fb66ee5","sha1":"f49e3e6e2aa40949482c7d8aa0ce410612123d9a","sha256":"337b1fc1e3d0fc5fab1ec84c7fd67e07b077a6a2a0b3f0312d01c4b7b51cb099","sha512":"5b98ad4ec8719ba911c616c30fdffc23a5bc930bc34b9b8c2146b32e29ba9033432f900b01959d588e52682fc94b02917e9cc692efe1dbfe0ebd6b0439508611","ssdeep":"","tlshash":"d121a5f56801ac15601b73e5dcce904da803fe2edb0158ccbddd9919c9b9e3c14169cd","first_seen":"2026-03-29T15:30:12.060223Z","last_seen":"2026-03-29T15:33:02.54561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/ea9965011c18b992.css","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlab.digital/index_1.html","date":"2026-03-29T15:32:37.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /ea9965011c18b992.css HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: W/\"69c7f748-19b48\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqIZ9KBalclzIp7XKWvVilqTu0vAoB7pHMdYUCnLnY14WrkIGqvQ3uQdTgXhOPu7CHAK38OJZGbxDGG0LLRUcBPypQx%2B2Yy3hqv4P%2FlWgZjXpe61E2H5fp6BB%2FGcdi%2BkR0EEeb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda4d83956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105288,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"dd9ddcb5c4066a6890dfae08b77d2e1f","sha1":"457df01f5b4fc64d35f5582379db42faa42dbde1","sha256":"8ae8f8f0505c37b6ed1ebd92bb9fde9f92f716f056513e529202a48d92bc6afb","sha512":"91e2a18467b7382539923ad126e15ba2bc13e138082a206dcdd70e3ba6c4679f5ad27f712e70b6ac3f9ee52aecb3e06bc6015b48a41f2f81927dbdf99097ce12","ssdeep":"3072:MGQhfVRHBCmT2I8HsQ2wTtybjrSWxDhbvgc0:MGQhfVRHEmaVtybjrSWxDhbvgc0","tlshash":"0da3711df652113f3c2780f9d25cedada116b1c0ee3a6be6be4221108ac67e35de7254","first_seen":"2026-03-02T21:02:39.702169Z","last_seen":"2026-03-29T15:33:02.548648Z","times_seen":8,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/secureproxy?e=jscdn/getFile","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opinionlab.digital/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://opinionlab.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"1jva6vfbwxxnzb68pgcn\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPeDyZy4FygYmNofrCBoooJEeWOnBEps8JSk%2BfNTDa9WmT6pc%2BqXwB7fiALYqnEnkBJCA5NUJKdvrwf8KEjKDDm1oMLohFSOlAhoX%2FLDrSPQpBr3AEKR9r6WQZbuxSdefx8HKaA%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9e3feda4d83a56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3541000,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"144e3646a54ef0296f6b19b41441eace","sha1":"177ba3eb12e4c4e1abb47aaee32c73ac1d93ff44","sha256":"eaae0ac1f8c959b05351f34c55d950ef9364008fbe3b0e0b200e0219ce8a8af9","sha512":"2b34bcd436fa6ffe586ce1bcca0a37c79d7decd9c25db423f4c4a77918f20420dcc6ff1c7899d0424d1d5b378fd988008820b8367a8493ed9431a86ce6695705","ssdeep":"24576:7Ob/Nx0tcH5jSCe/mM83PBsffQtsWPb1WWYO32zXICvW:qZutcH52dH8PmssWDgWY/XXvW","tlshash":"f42512d7e0256053336b6cb17ed2e9fad88e60496ac446374a187c4ca0db1ddcbf4e92","first_seen":"2026-03-29T15:30:12.063482Z","last_seen":"2026-03-29T15:33:02.549285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":213,"receive":540,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/index_2.html","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://opinionlab.digital/index_1.html","date":"2026-03-29T15:32:37.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 172\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fhlKk5A9LB%2B5OhCsHzCp9mIe9sMwYLccig4XF1TG1CiXpcnrMJlI9ZfzI%2FS7r7Xrs0eLeubiJoevWGje9bF7h1qfGH00aYSDJCe8Fl5ui7XcQdVlpvSwrhvM22%2FjeyZtRP%2FQ9N4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e3feda558c056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-05-13T23:14:34.751375Z","times_seen":418,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/favicon.svg","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYGJIRk9%2FzL%2FWoQCJwr%2FYf1F7wp0v%2FQ8JKbJHHucaNk3kTCexKjwJWWAJ5CTNRYHyUHTc6RwmlvHmcW2pPGm1o0QtkjXZx666mOOWRnJn%2BQvIBhlxDasHQGTdYhF%2F%2FtNTBReEzk%3D\"}]}\r\netag: W/\"69c7f748-964\"\r\ncontent-encoding: br\r\ncf-ray: 9e3feda5992d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2404,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34cc1bcdfcb54d32dbeca59b2c218211","sha1":"7877657c2e117630ea678145e61ed5b8e161e762","sha256":"619dc173b81aeddd63f34118e6759e16e366ab085435c870a2ce4de191da7033","sha512":"b46f647276eca8f273b230d1439bd0ec6dc50abbd46a6ba5b7bc4b9b7aa4c967ba383deee15539401bcc5993f2898ffed56b6c4763f2f387bade97e998343b50","ssdeep":"","tlshash":"aa41dced7d08b7c0de740324de5ab03b212371fc1a91439094846b1a3d91afe8cdaec9","first_seen":"2026-03-11T01:38:40.261769Z","last_seen":"2026-03-29T15:33:02.551375Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/d48eda8eed1b4b9e.css","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:36.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /d48eda8eed1b4b9e.css HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: W/\"69c7f748-b10b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODzoYfmkzU2Wd0koXRZBNUSfRT%2FbDl5DnKWwyr77K%2BmWTY9y%2B5utp6iSblegymetwytKpLCvIv1xVPZ%2B%2BlnR8EM7vebqgPdQ58P%2Bk3tORqBfr7BaAIzSFGOjOUT4F3hms0G52xA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda33e1e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45323,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37506)","md5":"86a198d076d88644692b354f6c37686c","sha1":"00c5f4156fde7b8a963358f7da15add7e1a5a5e0","sha256":"f5cf2d090ade6066deaf11d5eb5a379821641f245de3852e6bb4ac658c6f674c","sha512":"fb3077eb228bc992848409a50cc87602f58edc44e40d7d8cf0d4bb570cbc7cc31868e4a892a725fe91399b4dbd5240e059daf2dcceb6a271551196909cb52162","ssdeep":"768:P4obiUcE7+vxHgK0fkdL4eWEvy0tjklboeoQNG9:wCn7+vuK0fkVnWEvTe6r0i","tlshash":"9413b764a326d83fed33647a23ddf91d611ce0519e115be8ff1235128ac76f21ba1728","first_seen":"2026-03-29T15:30:12.05803Z","last_seen":"2026-03-29T15:33:02.552923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/logo_200_orange.png","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /logo_200_orange.png HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 10995\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: \"69c7f748-2af3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4%2FLeyqE13H12YubcuLq%2BeC4jGrPVlKDhNWIWKLyy%2FecXViEVlV05OmaO2bUw13o0Fj%2B6Rfn2bEg8rrGtiYK7uBoeiR3xEgMVmJAUPQxf9hpPx7RjsJ%2FsCOc26I6fofBfoql2rQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda33e2956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c5b5b6744c8e457d4966219ac16cb7bd","sha1":"1ba03c83ab21101329f9adadc2a405a909f7cf37","sha256":"f037955f2e0c26ea7fd4d226e46024b4c0cf8406a79677d1201c3b1d2244495d","sha512":"ff72cab27d6c7c2405c8b9af64711ad2aed9fe5c2d04a6c14f26a6b298409309f25b28ecfb67c7003bc6a9648452ad6e921d8011034be16f5d31a7a6d08705fb","ssdeep":"192:6Slhgt1A/zjcda1kYXT7i42cWscA0FVdeDrgsuKXAaoJqjDI2YkZm9qIw:1bg/ubj7i3fV/deDrZuKwJJqvGim4p","tlshash":"cb32bfdcced4a8faa65e1c9125d60b79cae5e3750fb936a456cc0631101fce902dcd74","first_seen":"2026-02-14T16:53:51.903131Z","last_seen":"2026-03-29T15:33:02.554861Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlab.digital/chunk.40.kyxaqcb0.js","fqdn":"opinionlab.digital","domain":"opinionlab.digital","tld":"digital"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opinionlab.digital/","date":"2026-03-29T15:32:37.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlab.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Mar 2026 14:52:52 GMT","end":"Fri, 26 Jun 2026 14:52:51 GMT"},"fingerprint":{"sha1":"41:7E:F9:1B:DD:70:EA:94:3B:E3:23:C1:8C:3E:95:13:C6:09:18:94","sha256":"D9:D1:16:63:9D:22:C5:A9:7E:83:CD:57:BE:1A:7D:E4:29:E8:14:EC:2E:FA:4C:69:DF:5C:4B:A7:7D:25:8E:34"}}},"request":{"raw":"GET /chunk.40.kyxaqcb0.js HTTP/1.1\r\nHost: opinionlab.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlab.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 29 Mar 2026 15:32:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Mar 2026 15:44:08 GMT\r\netag: W/\"69c7f748-405d9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 173\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQY%2Bfp3jFldnQmIA62y%2BTdiZ1T1mVm7cvx4gbdR5O2QFq58E0J8g8%2FNqi7Lf5celNsfPAsmXBHBHGRwWubJm8kWOSpsWQ7PPPLzfUQWCldoyrhGZTCb6WEgqFy%2Bm6cJ7QekriZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e3feda33e2456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":263641,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3048c023ba73480ec5938c0c27515b26","sha1":"7fcdb57f6f7b211c7fd3744e519f196411f68b2f","sha256":"58b4f52aeac9cc7fd0cb35d7598fabe8184e6176cd257429b38359d7baac5019","sha512":"ad8fa78abb7492ed4923b0b2a62caa72682b03f8c086a9b4f789fa44ff2cbcc0fa277993759b1f4a29f7f4aab0c192c1c168dbbb6be1f677ad2a05d7097f1be5","ssdeep":"1536:hM9xZQJGAxfwWm0QA4PWyNlsykFtOMvoI4tR1tvg/a1C33NK:hMtAlwgQf0t1vWRjvg/aIdK","tlshash":"a94402c5599695e5be0602decc72ed04e0584d13be6cf453aaeefdc17029f2280973ab","first_seen":"2026-03-29T15:30:12.064744Z","last_seen":"2026-03-29T15:33:02.55577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"opinionlab.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}