{"report_id":"fbe2e0d9-c6e8-4ee8-822a-6bd98e6ee584","version":6,"status":"done","tags":[],"date":"2026-02-14T16:56:34Z","url":{"schema":"http","addr":"opinionlabs.trade","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"172.67.153.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"opinionlabs.trade/","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"title":"Opinion Airdrop Guide 2026 – How to Qualify \u0026 Use the Opinion Claim Portal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"opinionlabs.trade","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"172.67.153.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T16:56:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"opinionlabs.trade","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-01","domain_rank":0,"first_seen":"2026-02-14T16:53:47.671697Z","last_seen":"2026-02-14T16:53:47.671697Z","alert_count":20,"request_count":20,"received_data":4789689,"sent_data":9485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.opinion.trade","ip":{"addr":"172.66.47.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-01","domain_rank":0,"first_seen":"2025-11-09T12:22:16.296613Z","last_seen":"2026-02-14T16:53:48.181087Z","alert_count":0,"request_count":1,"received_data":35166,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"opinionlabs.trade/","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-22T10:27:05.32214Z","times_seen":702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-24T09:08:37.182527Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/runtime-9d7e4d9fd7061568.min.js","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc2260c198bd5df9f03bcfab73d5b191","sha1":"76c419d85ed4681340890e4fda7eb67103f2958c","sha256":"28eb4d9ab5486d543f301a8c484a8f3fadfb941635ba6a547afa3c3d13470f47","sha512":"dc281147c4499bf0725fdf303ff2280040836988721a15d6f7dde7757385f92a8d1d2e7ce43cc0d713d7f8e0509762b87a373c20c78536226a828662f185bfd9","ssdeep":"768:sBzltc9bdIBj4+JbiKzXL/7cwcKBEen6sT1ylcXcfWqYUb4izunLMcxOD1cyQciX:xd6zXDE9ROLePvkA9tbol8E","tlshash":"d3a340d4590b90d48e1522ded477ec05e4284a23cdadf2a7b92ddec2b56df22c48723b","size":99491,"data":"","first_seen":"2026-02-14T16:53:51.901808Z","last_seen":"2026-02-14T16:56:36.323434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"opinionlabs.trade/2b113bb6549ee0b0df816e4363d2d39beb7ba1a4.png","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /2b113bb6549ee0b0df816e4363d2d39beb7ba1a4.png HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3466\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-d8a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0eZJTEvKUWtar6W5kS4H4hrggubg8Sgj0lYr2C3j88VZxZRpdinZfH%2BwMSKFX%2BapqvSSYrIdikf3B9NSkQk66%2Blw%2FFPHd%2BRqT8Y8U4WCPGTk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a320d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e94560a6bc68086d0a6145b4300c667b","sha1":"2b113bb6549ee0b0df816e4363d2d39beb7ba1a4","sha256":"014fa561aabf538cdba607bbb38b763f4fbc9cee7ca8cd47893273539f80bec5","sha512":"ea17e3f13b00c34a53d1c8f3e1fed050c2be0852c401ed7e99b0b33f9c99a9569d49efc9f51375d2c31ceb6ffecaf3dd9ac2e369a84e865c4ec4799e3264f6fd","ssdeep":"","tlshash":"d3616ba64f1943c2d9c94b74b090c9f86c7e37086145293e5fde7d14ef366908046ace","first_seen":"2025-11-17T23:30:12.314977Z","last_seen":"2026-02-21T00:14:45.613718Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/Manrope-Regular.ttf","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /Manrope-Regular.ttf HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/7165648a21c83b13.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96832\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-17a40\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yRbK2Wr0zEhWyizt9IZeTX9DOqI2xo8v3G%2FPjFhMQA6wqDwXO6a84lHRNPEPHZPjR3ehIp%2FGimx%2FmQhiW%2BO%2B7vLyuEC64Hb586ZImqt6yVge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ef2fa50d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96832,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"GPOS\", 29 names, Microsoft, language 0x409","md5":"8ca1a84037fdb644723129315c390ad9","sha1":"3f36e4904a42d23273ac346047c1b6bcf067ccfc","sha256":"6383bd9f81e56d61139884d8e42cb7b2146a11dde4efde55c8bff1e4c2c0bbe8","sha512":"a705e36c39065ca85fdcdbf69d5efe7511aaac6398192964d7fe0808a6fa9423a26cffc0949e939fe2991eaf0c8098aa9143a68d39e3e81f82cbb42245726061","ssdeep":"1536:4iW61FBzJN3Bk0lxOMek1Z1ZqH2llB7C5r0GYkP3d9e:O+Lzz/ZeCC90Lkfq","tlshash":"1f936cd7f5878f4de216687c8991e304c665be22951693d9e86dac473c870ec8ccb2cb","first_seen":"2025-06-28T15:36:56.137034Z","last_seen":"2026-07-24T01:56:21.150902Z","times_seen":200,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/css2.css","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-1230f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLpDQCsmL6pxe5J9iMa%2Bu4550iNkpVH%2FZ4MecpRipGXOMmBlpi%2B%2FphO%2BXJ0y28YEPJBuKnQd3f1iRh1BUzGKU1%2F5atDMjrVzgxLZWDzFMcQt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a260d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74511,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"124b8834925968f2e25e023ed0576ea3","sha1":"ac5d263dbf009e7f27bfc6de8747f61ba445291e","sha256":"3cfe489c3a0e82bfe89669788e1fe6019df40b6ff04051a2433e10fad52659e7","sha512":"41fb23e0889f8a73fa5d498773d769c4829d10432edfdc86ebd69cd364e2c94fb22ecc640995cd56923563d2728322122de374ed57185e00aa347dd1f2a4989a","ssdeep":"768:L07vngBK4wBmK/rfOJTnAKiqUl54LBw4mLWSAxVAbTWleHW:LYrHyrDVm+faKU2","tlshash":"ca73ea90041b1040a7876ce223cebf36fe5ea240b144d539abfd575beecada562b435c","first_seen":"2026-02-14T16:53:51.907636Z","last_seen":"2026-02-21T00:14:45.61278Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/logo_200_orange.png","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /logo_200_orange.png HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 10995\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-2af3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6vmMLalK2toDdcnEbcOY44KDTQT7wYZMGq8VMjO3rVbm389Ciu3Y5fgRPVOUcmcejOMOgjSQhu2CkBt3s3XIkVLShx8WoUHcLkcU2Y8gYka\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a2f0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10995,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c5b5b6744c8e457d4966219ac16cb7bd","sha1":"1ba03c83ab21101329f9adadc2a405a909f7cf37","sha256":"f037955f2e0c26ea7fd4d226e46024b4c0cf8406a79677d1201c3b1d2244495d","sha512":"ff72cab27d6c7c2405c8b9af64711ad2aed9fe5c2d04a6c14f26a6b298409309f25b28ecfb67c7003bc6a9648452ad6e921d8011034be16f5d31a7a6d08705fb","ssdeep":"192:6Slhgt1A/zjcda1kYXT7i42cWscA0FVdeDrgsuKXAaoJqjDI2YkZm9qIw:1bg/ubj7i3fV/deDrZuKwJJqvGim4p","tlshash":"cb32bfdcced4a8faa65e1c9125d60b79cae5e3750fb936a456cc0631101fce902dcd74","first_seen":"2026-02-14T16:53:51.903131Z","last_seen":"2026-03-29T15:33:02.554861Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/f0f7f559d5b44159f0f3673aa20b293d197a101e.svg","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /f0f7f559d5b44159f0f3673aa20b293d197a101e.svg HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CcUd4cZggrXNC10px0VdivKwbQKI79y%2FeIT5FWloP11E8BSxsfk4%2FcztR6Az2n5XoxLC%2FuM1CRyfe8SbERa01CU4ZsJgDAEJUEqGFn88KH5L\"}]}\r\netag: W/\"697fa311-283\"\r\ncontent-encoding: br\r\ncf-ray: 9cde18ed8ae60d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"35ee6af6fc81c567ecec31844efe2515","sha1":"f0f7f559d5b44159f0f3673aa20b293d197a101e","sha256":"795edef19430b0ca11ff203b999c089bfbeb59c221f22afd8b8863a1db2e4641","sha512":"45e4d18c8374a9163b4e4b634c46de5c043800a3de958c50963200cb1a287d2f81fee48ded116b07e46e5c09db12265a8a9e1967bd5462efd16f1d221f858252","ssdeep":"","tlshash":"7af02bd5d308a050d4003b5e8b0564ad12a930f97b8b8d899c803bc9b4ead6f1da5ed4","first_seen":"2026-02-14T16:53:51.909355Z","last_seen":"2026-02-14T16:56:36.316549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/Manrope-Medium.ttf","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /Manrope-Medium.ttf HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/7165648a21c83b13.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96904\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-17a88\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aFIIjqX8eJVzCO7hePEPWhNYlGUxO9AbWnxdjqSnLGBBe0rcbmoB9qgofNC9AihzUJ3HkUjc3MlzDANF3%2BGX%2Bjm0o7PO7f7IACalAdHGZwE1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ef1f8d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96904,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"GPOS\", 31 names, Microsoft, language 0x409","md5":"de7b3026c153d63d5732582887fecbf4","sha1":"b5e2c6265e0919163142bb8eac9b6450fb91f920","sha256":"88d3f8ef004b53483a202772d09acaab17ca99dd41905d9b4ab07ac635632378","sha512":"80fd043e6feb78cdca0913c489db13bda06ded3e34aa60d6fc73c59edaa3eb8380f9e731db792dd208f3b5e66a3b4662a3f153d82bac3959030314be6d3d92e1","ssdeep":"1536:eD61FjzJNTM25iAENSj2VFqDoM+z/uh0DU5wnLZ:eD+RzzCNSj2Vof+z/uh0DU5wV","tlshash":"29939f87ba420a05d1667a7dc1e6d300c769bf32474a53dde87c186ba8c70e88f957cb","first_seen":"2025-10-28T02:53:51.18174Z","last_seen":"2026-07-22T16:08:55.451102Z","times_seen":136,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/97fe99184ae40235.css","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /97fe99184ae40235.css HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-a0b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rgj01sJzLnzsHDonBwDQ9BdpJGPbFW8zzgF3edT2SaNmbiL%2FUvYGj2q7FOv3Sfhrc4RAFcIG%2FsL1h8qA7BDKYJQtwPGYvysrpvmVDjDLkFRH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a1d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2571), with no line terminators","md5":"8342e141cd1e92d1248b7e3d206923c4","sha1":"e2dd2ecabc8ee2b67d0834abbb64c06e9e9a2c6b","sha256":"e40117163f7b69e063af82a59866790726385425f3034751bec26957b6562a4b","sha512":"3c3f4918d3153e09157cbc27c21ca094afc22f15566b9725d73d1a1f72cf6b731141116368b6e674d0a04ac7c3d619f520891cef3e4fc30984716b9b8b8a9905","ssdeep":"","tlshash":"e8518b3d4a90ac24b429752eb698b99930c0440247338d3aea7add7ec4c736f3b50379","first_seen":"2026-02-14T16:53:51.917906Z","last_seen":"2026-02-21T00:14:45.612282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/MetaMaskLogo.232f1e6c.png","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /MetaMaskLogo.232f1e6c.png HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3026\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-bd2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdDj5RZDbhsa0ESvvQBliqOSQm%2FhJDtlvFexWiI0UdlpSVHzwDDPXjb6EoyY0%2F2FNp0C%2FzBYmmxZjgVonApal2mHYo3CZxbEqsdoAvtBgPHw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed8ae80d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"d64e40a176af93270417d59dd470e85f","sha1":"5881cfa4b357430cbb2319355434910ff2e54185","sha256":"e5cc245ab47dff824187568dad5e37de605641fd945c38bbcf391b633ccb8119","sha512":"b4e222ad9845473a1792c79cf865587309a7351312d3cf2f19e2974d600e952832868bba6a7c750867f65bb4cdd6a01f88db30b9364a57f8ee0bd2945cd02e60","ssdeep":"","tlshash":"f9515cdb45c2b895c42dfb750fd837b28849a9303b44e063058fd1c01d0439974face1","first_seen":"2026-02-14T16:53:51.910144Z","last_seen":"2026-02-14T16:56:36.318743Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/OkxWalletLogo.55ec6d8f.png","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /OkxWalletLogo.55ec6d8f.png HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 543\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-21f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rd4j9w%2FOP8M6UYpLT3MvrBEe9bmcBovKhhZxTZypUZyKMCZ8vm3i5IQrFgb4aiLQGugDRt7JyF818Rk1MI5QFXPmFA2tlcLm2k1ugFGo7St%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed9b140d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":543,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"7017b2c9460ccfa3ad3543e2ef5167b0","sha1":"519e7304f38e7f7d42cd72923af7e4663a79c233","sha256":"fd465e7fbc468e504d3a9fbf6cf59ed773aabc0d80f8b7bc1dec365fa7a9bd78","sha512":"cf89d54d64d5c9c8f7f057d291154d3835ea9af6c7bb65eda40b143725957f3b1f16d6ef1306c8da1b675a14c4847660c1d7b4a41483532a9d70d9012c6fc9af","ssdeep":"","tlshash":"42f075a2f36c0061d24690721d2253017b34c042a72223cca4e13d01af339d17cfd003","first_seen":"2026-02-14T16:53:51.91874Z","last_seen":"2026-02-14T16:56:36.319284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/index_1.html","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5odGzVMFY%2BE7%2BpmSp%2B8H7ZnPCdgbzV9942xHKALB7UD%2Bc0jf4yWp0IH5n1EJ5b0odCKugmhNVzqKavBiu%2F9Pr4sQ1Tr%2FKkF1GKfBE0v%2FiAE\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cde18eedf070d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1342,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1341), with no line terminators","md5":"ce8d351e3875f02d8ca53249266c5657","sha1":"d31ec6480f0224c6234703d28a15cb03dff1051b","sha256":"894a3b32191a3be986a676782570f82dd65ea35deb0ec3cd2742e8f32be8dbac","sha512":"031e8d1ea5a602b7e338ade41256cd9da82d6efcf9f63e45b68d0aca899264b5730d9cab2b48a4612804dc7cb44d812e3fc639466d6dcca56b03dfdf6b02a036","ssdeep":"","tlshash":"d72186a26811ac19601763e5dccd904d6403fa1ddb4418ccbecd984dcdbde3c115688d","first_seen":"2026-02-14T16:53:51.919599Z","last_seen":"2026-02-14T16:56:36.319922Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/6a4f3299acaba8ee.css","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlabs.trade/index_1.html","date":"2026-02-14T16:56:11.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /6a4f3299acaba8ee.css HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-1954a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2B6UKb6lPdZFzlKQcvsDE2phrFiWDh0T0Ge36LmRTaOWXxg5kU57dXUdPtx81BP4BLTNrv05qb0JaDjoE5m%2FWVrhAdJxt4GQzi7ZHhWGSHxm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ef786d0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"4ea3552a21109ac74e332031fe964d78","sha1":"41c0787828502624f24fd4233411bd8148633477","sha256":"cd38a60aec3ecb2dbd86397436d8da0913901002992cc10f0212d520d07dc412","sha512":"8307e047f0044e4c3e3ee2bdd7997054bab637e00bcd89a1164e232ca593c648adce9ef9b1a61d1d34a5f04dc1a14d20a7e0fb1d825163de88047bad32872a1c","ssdeep":"3072:MG8hfVRxBCmH2WMH9Q2wytybjrSWxDhbvgrx:MG8hfVRxEmWFtybjrSWxDhbvgrx","tlshash":"f5a3711df612113f3c2780f9d25cedada116b1c0ee3a6be6be4221118ac67e35de7254","first_seen":"2026-02-05T13:32:06.036628Z","last_seen":"2026-02-21T00:14:45.598704Z","times_seen":16,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/index_2.html","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://opinionlabs.trade/index_1.html","date":"2026-02-14T16:56:11.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 167\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpzZTi6U9TcVMAssWE4eIKsBj9TS6Hka9WLwRjihUesqu63khtDph4k247LhEnkdTPV1oV%2FCKqYI7cvLFWO4c1FK%2FeSeI42TF6OCAP75hpws\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cde18efd98c0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"292f74c92c97c686c723a291030cfa93","sha1":"ff7ce2a278d64bb71b8a15797fd10276ea6f0df2","sha256":"baf0572ea402de47c8c0c44f67fe0b4af40bd7bc06f5733bac13f51bb4ac4d08","sha512":"4f34b0d47baba42b1c93958d291540f76e16fb3f67405fec9d87d0d8d57bf4ae454b63e8462a3b238ff1f6306323f7af84e182781658961d0acac1e55b70d953","ssdeep":"","tlshash":"54c02b22dc04480f3d009fd1cb8af1c4c003dc3ce8315c00b867b544e9ac131c012548","first_seen":"2024-08-19T15:34:07.77924Z","last_seen":"2026-07-23T13:59:00.910994Z","times_seen":482,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/logo-with-black-bg.c7d5e6ad.svg","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /logo-with-black-bg.c7d5e6ad.svg HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 167\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbkd6E0w2ElskpY2%2BIEwsJoXhryV5QR%2FerqSswuqehyhGRooAjImUE6RtCca4xiOyWAE7csjXabQI8LXORCWQvpsIs1iK0m1SCwAz8RxAf7%2F\"}]}\r\netag: W/\"697fa311-7d6\"\r\ncontent-encoding: br\r\ncf-ray: 9cde18f07b330d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"854eb50e9b45beabc8c11f9dbe906990","sha1":"8d5211aa9e8a9118667dc4c2f5f030a0cb82ca23","sha256":"3c4557ccdda5649458541af1253b818d5f7e53749b22126ba88dd23a215e097f","sha512":"41b97fddde8f021b97562f614a2def802ee4475058f57e280ef2ac41d600828be53def7f7e925b5bae20a2d2e1110e99522cd946218e15aa7806fd82709a94e6","ssdeep":"","tlshash":"184173e0d3c8d2c0f606cbb0c636a072396e30f12d99d3a906da6faad07500e16fcc94","first_seen":"2025-11-09T12:22:38.3346Z","last_seen":"2026-02-21T00:14:45.601735Z","times_seen":10,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T16:56:10.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0DI%2FCl37n%2F8NWGNwU2OxstfT52wT2bItJzL%2BLyELaSeDErOQxe0o3f3gv8W0u3CLVhfqY3o7VKB7D%2Fgp3Jni%2BfQuBjreSfShbvvPGy2FHb6W\"}]}\r\nage: 106114\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cde18eb8b67dd2c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76161,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1694)","md5":"0649e2a5117dce94bd92f3b8cf4614a3","sha1":"c19564d996c65433fc8ec4d4a16a7bf7285a79ff","sha256":"ab45ea6b8fac08b03c55f9b9aa910d0883125dd7a4087e1c7eec27eef75bb012","sha512":"94b809de1981f0e2a808e23c51acd8125bb5869bdd38acb9fc8321d6853f5a0a9710f10b6c43031907fbb6cdb651b4d2cc442143dfdc77bf09de0a4c2ecc0a59","ssdeep":"768:V8DMfzKeB1RFovoy/LrTGzlzmZ1/AllHUbEQuAM+YtsIMTTkgVCeuGXaWbH9vzo2:AMf2eMvJ/fdAllHUaeBCWZvzoC5","tlshash":"1d73e8a0a662e1ed984783beb7f1ec2311219413ae84fb8f73ed80649f5b8e554ddd40","first_seen":"2026-02-14T16:53:51.906722Z","last_seen":"2026-02-14T16:56:36.3223Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":36,"dns":1,"connect":8,"send":0,"wait":25,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/7165648a21c83b13.css","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /7165648a21c83b13.css HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-17fc2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nKqspDZEE5vh1%2FOco9VHF2iipwfmKl2BcnuuGx3NjlJ8imwAx7rcyToT62tHTsvyHyd0CYmrjBrLg2Y35taA%2F2WCxfHnCIlr9f1bqSd69Oo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a180d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62334)","md5":"b0fbdcf89ff614a6d2ad7726a2de750f","sha1":"d6df3d5f887d9afd9ce30d798c72e38d209d4b74","sha256":"06bfde02adf16508684d038a58361403c3f2551289287fd94f9421cb56395a8d","sha512":"584642e5909d67d6f78f70f9ede0919634370393115331699173a66b6fd47b1a35f7c03ec94043bdd8c5c8065a5364226ef8fce41e986f6c60c01e6b389f0841","ssdeep":"1536:Ud/b5i/qf/hdyXJO9MDacWvkOdRdD8Y2IeVOua4bBI/cbFqRX:UN5i/qf/hQXJOsacWvkOdRdD8Y2IeVOJ","tlshash":"aaa340e4f329d57bac37607d53ace85ca119f542cf150fe8fa11b12686c7af319a1228","first_seen":"2026-02-14T16:53:51.917034Z","last_seen":"2026-02-21T00:14:45.611197Z","times_seen":4,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/runtime-9d7e4d9fd7061568.min.js","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /runtime-9d7e4d9fd7061568.min.js HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-184a3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2BZf%2ByaAfCaWyC1D4pBmEtvbjuRiU6Sj%2Boe7xm4iTznl%2BiSeXzlkl%2B68i7t5dm6nT%2B862c9c6joVHHgRk4D1wYsmDsfOAh6e0Byryj2NpI5P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a2b0d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99491,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dc2260c198bd5df9f03bcfab73d5b191","sha1":"76c419d85ed4681340890e4fda7eb67103f2958c","sha256":"28eb4d9ab5486d543f301a8c484a8f3fadfb941635ba6a547afa3c3d13470f47","sha512":"dc281147c4499bf0725fdf303ff2280040836988721a15d6f7dde7757385f92a8d1d2e7ce43cc0d713d7f8e0509762b87a373c20c78536226a828662f185bfd9","ssdeep":"768:sBzltc9bdIBj4+JbiKzXL/7cwcKBEen6sT1ylcXcfWqYUb4izunLMcxOD1cyQciX:xd6zXDE9ROLePvkA9tbol8E","tlshash":"d3a340d4590b90d48e1522ded477ec05e4284a23cdadf2a7b92ddec2b56df22c48723b","first_seen":"2026-02-14T16:53:51.901808Z","last_seen":"2026-02-14T16:56:36.323434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/opinion.png","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /opinion.png HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/7165648a21c83b13.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 588206\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-8f9ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4g2Vapxx94e%2BvclA8%2FnAuE4bwXd1WButKp3nr%2BR2%2BxBk16wRoLGsL9n3yMbVv0pNg5dt2G3KlXx4XxhphMCa8MuqA9WwPr956cmmO501yGe1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ef0f720d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":588206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 820 x 480, 8-bit/color RGBA, non-interlaced","md5":"d2f4e5bbfa3048595f647274a5d28da2","sha1":"a0a144d0592ec3ff22e225a84336c50690c2f4cf","sha256":"c2c21a597fb637e98a1379171e684680cff120376f6112c27ca16f6ddc936ebd","sha512":"c242331f49253c5eb53e6652ba1afac8a917873b64ca4c9e74618ceccd00f10970277f217b0fd651272ff1bd9c8c7ab33c07c3ef97ded307ce45eb7230e891e4","ssdeep":"12288:ckyF1C4ZIb9e8bQtnMUIQ/I0i+HWStCyxcA+WXfmUDzd90k:ckyFUkIBczi+HWexCWPd93","tlshash":"a1c423c55929465ad8bf9bd2b03f42b2ab53bab3fda0e513b2c61901523bd9439d100f","first_seen":"2026-01-24T14:01:32.747753Z","last_seen":"2026-02-21T00:14:45.603721Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/Manrope-Bold.ttf","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /Manrope-Bold.ttf HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/7165648a21c83b13.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 96800\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: \"697fa311-17a20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8If82NwrNt84Es%2BImUHloxRE76JvcMbTGoVFaaMqykTPTDX3Fdhf3sKEUc9oPEtR9Q6w1rttOeCeD2K1X65SPQcgLtJTiWmakq2FXZmohODf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ef1f880d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96800,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"GPOS\", 29 names, Microsoft, language 0x409","md5":"8e8fe178c0f147b91ed2a2b3097ad8a4","sha1":"dbc0b874ad8b9f3415d0e9b4e22907890ca72327","sha256":"4aed5d180a4f41ed21f07e678486f889bb40eb0ddf5f473769b6302f507d1e36","sha512":"001d6487fa5b0055b090f9ec9852fca58bc91fc129dcfc8128a43f50e72c01e1deaf447232b0710428ff9745d4b35fd4ac136d864dcc3bb6faddacdf82819579","ssdeep":"768:Fm9MeM6N3fgO7KWWPGzJcUL5j+jUg/y6iBKW9e9yhYyBh0yJdacK6MgAPPoSE1OK:161FPzJNCdPqyDJv3ojwbjUHco","tlshash":"6b937d4b72038f06d242393da9e6c3a4d225bc31d719a3cde9e96c570c8b1f94dd968b","first_seen":"2025-10-06T09:52:49.381723Z","last_seen":"2026-07-24T01:56:21.167076Z","times_seen":125,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/secureproxy?e=jscdn/getFile","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://opinionlabs.trade/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://opinionlabs.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"n9lr63law66tece63igd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVPONB3afBGUfMMkgYz%2B4iaNor2M8B48yn7EuLRmo%2BEqRvdPhx%2FDj2WBN8nBdYp4SfMlcbH%2BDjVn3LMCnf16hadCGdGykUYHHXBvB8Drx5ftPg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cde18ef786e0d38-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3412923,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"beb32704dd2162592ecd207df61ba797","sha1":"7f5ad306c509288afcf149f31fd82920ebd50bad","sha256":"5614a58920589a592e24defbc4e88c4cde6ec2ebb7dcdc1afd91f21e33210e00","sha512":"d79130b8d55fa0a3eaa3970210ada81bb13209323c1c237f2fbe59de83f5ecb45332b842e3799cc680c566d8c720bc2b0951a7182be15ca0649c91b0e0a9bbf9","ssdeep":"24576:dyV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdxWJfIYT:dy7OwPEZJsafIYT","tlshash":"bd2533101e67ed894f4c9a2474bf7e036d821f42888d94dbeb65eac401e8375839de9f","first_seen":"2026-02-14T16:53:51.904096Z","last_seen":"2026-02-14T16:56:36.325264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":419,"receive":460,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.opinion.trade/icons/apple-touch-icon.png","fqdn":"app.opinion.trade","domain":"opinion.trade","tld":"trade"},"ip":{"addr":"172.66.47.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.opinion.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:05:01 GMT","end":"Tue, 28 Apr 2026 07:04:54 GMT"},"fingerprint":{"sha1":"5C:FB:C7:5E:7F:91:52:49:67:39:1C:2E:E5:7B:F6:40:E7:61:F6:78","sha256":"56:27:27:8D:B3:2F:0A:58:BC:27:C8:9F:6F:BB:88:35:D4:28:FB:84:6E:2B:1D:B2:DE:36:18:DD:FA:70:B7:65"}}},"request":{"raw":"GET /icons/apple-touch-icon.png HTTP/1.1\r\nHost: app.opinion.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 34050\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8ef0ddf0599b53bded0e1d9cc7bac037\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: frame-ancestors 'none'\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /icons/apple-touch-icon.png\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3GNQ0MVAspTO1U33K%2FWrYSPxaSJPNhoI7uv2%2BRoaGgQ7bduT1oB9vwGf%2FLdvZkEt%2FfSEILm1IspnqcdnbG3oe%2Fnna97JeoRf%2F8Mib8b4%2FMN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncf-ray: 9cde18f0aaf24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"d81ba9c3c3136b23190d2c4460031de8","sha1":"b10d4be99be49c58b74071423fee6a9636efcff0","sha256":"87c17cb7616894e50f79cd4b509535792c9386be3eb7b15c15dcef6447f1ce93","sha512":"05378192c7b380dd37bcf90c0a20aa915c232685e958f9a845dd7c1a4c5fdabb5fa53d8a947bf27c2e9286352a878105455ac06372ff1ec3e55b07e80102705e","ssdeep":"768:OIiU4HhdOu27q2d0lN8bNr9eSj0F4mxo2qILW56eTumcmT6BbodsCYdlBref:OIipwYN4JEsGLWzTuSdspLBqf","tlshash":"3de2e130a5c7e89bd0391bb40e414950e306791d3b43a60347f27ab3abe8f5e776c55a","first_seen":"2026-02-14T16:53:51.91614Z","last_seen":"2026-02-21T00:14:45.600663Z","times_seen":5,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":25,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"opinionlabs.trade/c96f24cf51a6e2e9.css","fqdn":"opinionlabs.trade","domain":"opinionlabs.trade","tld":"trade"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://opinionlabs.trade/","date":"2026-02-14T16:56:11.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"opinionlabs.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 01 Feb 2026 18:04:55 GMT","end":"Sat, 02 May 2026 19:04:44 GMT"},"fingerprint":{"sha1":"27:CB:12:68:75:53:E3:40:34:22:02:D1:6A:6E:57:01:0F:75:15:0E","sha256":"3C:49:FF:E9:15:44:47:B1:8E:A9:1F:37:62:9B:B9:B1:27:21:6D:C4:A9:55:B0:C5:4C:43:9D:F1:30:4D:30:B3"}}},"request":{"raw":"GET /c96f24cf51a6e2e9.css HTTP/1.1\r\nHost: opinionlabs.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://opinionlabs.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 16:56:11 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 01 Feb 2026 19:01:37 GMT\r\netag: W/\"697fa311-a43\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 168\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLMnlx3Qwx%2FXiCdBe95zNbAQBFdsM420UVfSH2jSx8HFOvMZ%2F5vEPx%2FX0RSYKDp%2FUCKJUbmu9NGY2ISS%2FpxSSokTBVpUGXjPg%2BxMfcDojeWS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde18ed3a210d38-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2627,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2627), with no line terminators","md5":"6d577e8dbbed7ae2ee4c33d8baabcd3d","sha1":"c34c5d2702cab511ddfd52727cfae5451852f1b7","sha256":"17a2b6762164ad6ec3d445a14120b5d17d98a442e86caf84610297091c62a00e","sha512":"cd79c57b373868c4f8ab94c0cc45b310c3ab8a3f3c8c96359e5f4a3e7865eae2df20593f0af77eb98338726813e9812cefb6f0937d5eea4134338d83cb419864","ssdeep":"","tlshash":"2151e0ba55a5ed6478a37c1e2748f48c28009642c736c99ed9729636c9c30ff3b70728","first_seen":"2026-02-14T16:53:51.912294Z","last_seen":"2026-02-21T00:14:45.596613Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"opinionlabs.trade","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}