{"report_id":"0b06dfaf-84ea-456b-96f7-6bba5c81998d","version":0,"status":"done","tags":[],"date":"2026-09-15T18:23:54Z","url":{"schema":"http","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"104.21.37.189","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"title":"One Investment Group | Independent Australian funds management business","dom":{"size":143311,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40266)","md5":"36827221b2f8fa1ed3794c112b08f388","sha1":"a37e201ab74f6f3745de3b38c93faf9be8226f0e","sha256":"13c0998bca15ea0d0a78677fbe86546b9aa118ea0730517a903cb789d9267dbf","sha512":"fe35399d221fd548f27b7460408f29e1ce32d66facaccbc37295ff562af6ca80c0308c924f612a934354e9f1bb64a7fa26c74ba8dc5af967fb312ac37d4b1844","ssdeep":"1536:rAYvgidFnSk7uDWwW7q+cS4SVu/SkN78jHUEwhe4iKi+fanwL84KNge8dAj+N5f8:8EvdFSarq+RJhvnwL2t","tlshash":"81e3957218a6283b570b05d5e169eb1a77c3815ecf420991a3f8d3adcfd1edab62310d","dom_hash":"domhashf3c3a22a210214c8010c35fe8c6433bd","first_seen":"2026-07-18T23:42:33.830413Z","last_seen":"2026-09-15T18:24:00.354332Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"104.21.37.189","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T18:23:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"sashumohan.com","ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-09-15T18:17:20.021925Z","last_seen":"2026-09-15T18:17:20.021925Z","alert_count":110,"request_count":22,"received_data":3363108,"sent_data":11811,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Site Kit:1.121.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:6.6.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.24.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":72104,"sent_data":635,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":8,"received_data":377232,"sent_data":4469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.oneinvestment.com.au","ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2015-11-21T06:59:40Z","last_seen":"2026-09-13T18:48:32.280145Z","alert_count":0,"request_count":5,"received_data":333792,"sent_data":3884,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":2,"received_data":895734,"sent_data":951,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":1,"received_data":359,"sent_data":502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-13T23:08:02.379663Z","alert_count":0,"request_count":1,"received_data":3791,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ae59b1913ca29e50513416ccd314d02","sha1":"cee8e154aad414656b50354f8b58faf6593f2525","sha256":"ba91b20ed6a0028ef5c5d865a7fd03e96cdb7420c2778a7eb47a7592c829de23","sha512":"89216b52ef531c2a2496df9b2ee16dd290d33a73f3f425139725cc99ff7ba9904a8b1533fa4ca8f3939fb484e58950076844a11add20b2adf53fbb39b6a7a9ed","ssdeep":"","tlshash":"4fd0eba004032cba02ff18003b4bbb0132a3220a00508c600c4102495f3f803a494c8c","size":275,"data":"","first_seen":"2026-03-14T22:06:30.346417Z","last_seen":"2026-09-15T18:24:00.382689Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9c70f503bc86fd2c1fcaad19aff9019b","sha1":"eb69242c7b6a0a2947f23dad8f41cd206fe969ad","sha256":"3ce6d55e65a74ef0c7f6ed15ee9360c5af45b2fb4ac06812e1a1380c450b3e61","sha512":"8d727b48c56de2d7cc8b69cf478a42bc6b9a08b8c7eadf59ef50df0adf1b7b7b96bfd183514a5ce9711bc195454ca418d5b1e9bd5acaad6c82fec89678c3e074","ssdeep":"","tlshash":"22e028da79111cb170ed05f533b1e1197143510878091c23cdfdcd2438185c74c135cc","size":341,"data":"","first_seen":"2026-03-14T22:06:30.347699Z","last_seen":"2026-09-15T18:24:00.383301Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6fd9094e86814d0503102df9d5dfa4d1","sha1":"8b0c06a86d929b80bf912e4b248f41e7737d2940","sha256":"5d96c558db496731c3c9b46bc69c03427092ac7b849272016689615ef14f9e1f","sha512":"1098499fe388bd17824e4219517711454df354874b9e9ff94b332d364b706bb0be87df705a5d5f0556f5a1523c1ad872a27a257090eeb9f7b53ce9ad74fb92ac","ssdeep":"","tlshash":"42c08c289a829d9516a9c2d9134db271761a818a8c1a9782a58443450f99068e0095d1","size":149,"data":"","first_seen":"2026-03-14T22:06:30.350297Z","last_seen":"2026-09-15T18:24:00.384523Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17ac1c8fd583e290619b63d0aea745bc","sha1":"b770e62417df378d95cc70b5a6f0955d6a153d64","sha256":"6d256beb71f4899bc0b4b0956ee5e8047b4acc6060be4189b9efcbe5dfc140ca","sha512":"c7e5a1bf05d5b7dab48e37c6fcb82a161ddf0edf0265b6578bfb6e5aa8502a5f875f14c36fea7cf70efb8e89fc739b6e3616b1e0a836cd9968b2ffd3af756f9a","ssdeep":"","tlshash":"bdb09216a2a11c5961a813b4228d0a49bae6a22b408cd809286aa921bf89924d1c63f4","size":122,"data":"","first_seen":"2026-03-14T22:06:30.351541Z","last_seen":"2026-09-15T18:24:00.385106Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47846c2558ea133d414554698bf4d1cf","sha1":"8756e69a65532a0e4ea39f8c93c541000f2274a1","sha256":"ae19cc271949ae889595f85dd531262899459206c844d5ac68c21d70b23f95b9","sha512":"df60f2cee35a5abaea721e46c4984f27c24d3917121b0defb9d5703a62c5b1277f6f8a41a82be6cd353e591614a1e1e62b675038bcc81ebc3222e3e72f62f2f1","ssdeep":"","tlshash":"a3c0803ce9f10c511ba64c5435592681de4186bbd2a6184a01b1851d8fb11d7d0417d4","size":165,"data":"","first_seen":"2026-03-14T22:06:30.352715Z","last_seen":"2026-09-15T18:24:00.385656Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e58ef3987fe3564429d448116208733","sha1":"49bf5e735cb7db6c243a0c4661352de8a3fedb64","sha256":"957777a8c8f9fe8363b0d2a527591a803773424aa275b124d5a3da471a08300a","sha512":"78256f568cd53c9c974e404965c99d4ab61830f455bbffd70e799f353193dd1e9cfa4e38176c65a438fbd07742ff83f2d47bed670487243b647d0179d314be5c","ssdeep":"","tlshash":"daa00211434e5cd315f09264975550816742064d055d4882b5c885551dd6c59d0d97f5","size":76,"data":"","first_seen":"2023-03-10T04:45:38Z","last_seen":"2026-09-15T18:24:00.386378Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c49cdb1e90bfec1fea3002fd3c1f1b54","sha1":"e6d4719bcaa0239044a4c3cdf20e039967a94bc4","sha256":"cf01dfba55c27e43cca73bd03850982155f547aa0fb93ada25449d119391ee17","sha512":"f4d42ddb9541b5a9deef920c014f8d8116df9cd4a5805fbedecc55d403ed8098d86ae9f4158cd3cb9fd173b19bfd2c72224c6ce80c5cdc906beabac1d1d41489","ssdeep":"","tlshash":"ade02b06a7060dff46ee515d3f85e02685cc1520c21088bb98f5ce192fd9410a18b3da","size":411,"data":"","first_seen":"2026-03-14T22:06:30.355315Z","last_seen":"2026-09-15T18:24:00.387109Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"388722716c8c89af1136cef19a98017c","sha1":"50875c3734cfd73eb9856bef783de97dbb496dae","sha256":"d39b00bf80cd9591e726005002d8084407bdb41ce867ac0e70ede5b7a781c472","sha512":"758f2d3f006c02d444367695830968f8ab8f59a46489e76f4fd148bf4d33150189b5547b952756d53dccba74eb8138f18f26f4d11bc5842b7229335e715fa2ad","ssdeep":"","tlshash":"30319ad33267c01bbcbb2413237f531e352079267f40b562eee5886645b8e43266b69d","size":1628,"data":"","first_seen":"2023-03-07T01:07:32Z","last_seen":"2026-09-15T18:24:00.388524Z","times_seen":1085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecfe7e57ec382e297b36fc266f53d999","sha1":"566e1d665ed3eb27d52b934b1fc1afb40363ca73","sha256":"865787ceb6ce3aea45c2510f2a8fc034df3b8ce21c137d7d3687e3bd0704fa86","sha512":"a224903a07b4d3a8df4971eb556b5c6f7f3331626266032a9775b3fba7c80601c17aa723dba4d3d14acf529e701db6fd3fe092d1b86a31e4e991652682e15f98","ssdeep":"6144:0rPU+Jo0FQ8zcFQk5fvtgDC8FaCC4Pxo8SOUuGaNPPdqJuejp9s23OOk0:MP80FQ8wlgDC8COgHJuejp9s23jk0","tlshash":"e1a43c85b31834b342ff21b5906f530a723a5569d906846cb8b8dcd82df8c59227bfbd","size":456258,"data":"","first_seen":"2026-03-14T22:06:30.343439Z","last_seen":"2026-09-15T18:24:00.37337Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-09-15T18:24:00.372801Z","times_seen":16761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-09-15T20:58:10.057097Z","times_seen":102669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-15T20:57:24.865312Z","times_seen":98427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/jquery.min.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-15T20:49:56.103392Z","times_seen":1057547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/api.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b89c7b075cfa2c6674a1efdac61eccb","sha1":"447a4523a7c83c18e875eed387dbeeab8a9c071d","sha256":"e8fdf9ceb2e0e67d350912156ee1e2841ec16088f50d4e72f5a65286332394ce","sha512":"f9aba0ddc753b6ee2a11de767dae0680caeebc25f45740495dffc66d7e8ec6468706ee394898bd52ab1b76d301c4e4cbfbaa392331f014914be96e674469b82f","ssdeep":"","tlshash":"3d1140ba1514b0315f231af4e4fbdfe1f481a028f12888d08415ee842e798d7ce15985","size":904,"data":"","first_seen":"2026-03-14T22:06:30.321926Z","last_seen":"2026-09-15T18:24:00.375186Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/gtm.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d58ca22ccde496f0fc4d941952609e0c","sha1":"2ae7348becb448b3dee9085e956fbc71c3ba63dd","sha256":"cb38b203ea6362301c00a506f5c4094f214ecd7c0638c3dd4cefeb1542724de2","sha512":"cd65f8cfc7fb8908cb3bbf7ed0fb1b1e653e2c5deac9e578fe19728de6c960be6beef06de4b0d5b5ed937bbb9fa262c18132f2efe8d132c96efeb66440a65bce","ssdeep":"3072:gBax8eulMYeHToG00clXoldVQbQwM87NzgOsEemtJeN0ZzVDlGL:0pmFslqdUd7DsEemvemzo","tlshash":"ff2408d8b7d6b42683a36478503f014bf17a6dd2f80cd894e146d4d82e74aa9427bf7c","size":217589,"data":"","first_seen":"2026-03-14T22:06:30.328627Z","last_seen":"2026-09-15T18:24:00.362311Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/lazyload.min.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","size":7890,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-09-15T20:38:54.99832Z","times_seen":9744,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJMSMFP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0adac3bd3deca34b59e4ee6c29f8f5f4","sha1":"f74a707eece39d82d0d1e8a17b74a4c874401787","sha256":"31d8414cea40fa5126c746e8eaa0d5d571d910b492ff088e2594d116b2d16d53","sha512":"9c7a98dfde747c06eaef9ef268d763d8be7a2a93e26ed9997e08a5974911b402f584a76fded1408f9b249ed603be5031bdda88c0e0ea44f6a96c9c852228ab0e","ssdeep":"6144:IWn1KcIOPImOh9mHFLgycRtbJEqq3RteW7ALfHneEr:Ip0+7Wc7+M","tlshash":"268419cdb7d6742283a3b574903f014bb23a79a2b84cc894f286d9d42e7465a5237f7c","size":371839,"data":"","first_seen":"2026-09-15T18:17:26.026275Z","last_seen":"2026-09-15T18:24:00.371125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-55BFW9XC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa0fd26228286900d3e9fb17eae30657","sha1":"bd9ab3a9f1a3b7a15fffc316ac7a65bde227d994","sha256":"87006ca841c6b203af23ccb2cf785a90fbcd8af0dfaa46ee817036181b4320f6","sha512":"ab9e3a9546d3654ec3b272c56e73d0dff94ba267773a77ca607dd5c032877dc45050899d7cc6b2059c83d90dcb7ccc2191600608830703a2e2c8af2a00aa42b4","ssdeep":"6144:YIdn1KcIGUPWmJhgYcYnsLg2cRtbJEqq3RtwfzA/y2EIwtgT84axr:HC8seoJfUVEIs","tlshash":"48b408ce73c674229396f174903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","size":522661,"data":"","first_seen":"2026-09-15T18:24:00.363533Z","last_seen":"2026-09-15T18:24:00.363533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://sashumohan.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","line_number":2,"column_number":981},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"sashumohan.com/","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T18:23:20.593Z","timestamp":1789496600593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2B4k0jhOLuY3FAaCwIDqhkw574tmdpES12jlk9wrLr8fb18oPLUM7t%2F4uiCBYvtY9xMzy0SQ%2FplrNdTSHjb%2FODL5NR1LBmAW1APW9P8CFUchD%2BI7oN6LZ7IfFTQ2urcD6w%3D%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 15 Sep 2026 18:23:20 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3b9a97a0a43efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Site Kit:1.121.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"WordPress:6.6.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.24.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":127996,"size_decoded":22671,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41703)","md5":"2822b4072c226cc4e0bd1eeb74f2e18f","sha1":"5ac3787e02faf267a79f2440dc7eac9ef57ffe98","sha256":"330813e896edcd7ec0919b9ccc643df6bb44930d071ff0a03074264b9ffbd186","sha512":"b6f5d849a2992b3c91c1f4b7dad7dea7cf9bd404f54bb6d54268ad0ab3ac76376fa437a6a334dc5ebd479d5ff5e36e7cb9d2fe1776879a26cf001ee20da0733e","ssdeep":"1536:rAYdlGdZnSflECuD5weu/SkN78jHUEwheHiKisanwL84KNge8dAj+N5fy5:86kdZGEBlweUhVnwL2Z","tlshash":"24c396b218a6243b571b05d5e159eb2ab7c3815dcf420a91a3f8d3accfd1ddab62310d","first_seen":"2026-03-14T22:06:30.336257Z","last_seen":"2026-09-15T18:24:00.355089Z","times_seen":18,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":7,"connect":38,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026ver=3.4.3#038;subset=latin%2Clatin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.140Z","timestamp":1789496601140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900%7CRaleway%3A100%2C200%2C300%2C400%2C400i%2C500%2C600%2C700%2C800%2C900\u0026ver=3.4.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 15 Sep 2026 18:23:21 GMT\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71420,"size_decoded":3301,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"10d762a63f425568f82a73458a7c5b9f","sha1":"973f088828a38eb5111bb4049f6195258ad22a01","sha256":"fa8aba87c148623d7b3c8e6fa80cb172816de8f9df8a798be1757f4c579c8c78","sha512":"9ea0e2eff64a59751568a4c5637410314d40a885896ca3df0673e80794056e89c70d0fb5597dfc03c7af9013deba5c7efadeeaeda70f1a8938b9bea44e3a8481","ssdeep":"768:G2yr/XlkbrhE49q6IFZFCFHFHFY4FRLFuFWFnaHQQY9RUj7MFsbbYSRv4wFMl22w:FYSRIH2Vc7j","tlshash":"ff631da108179400ab835cd223ce7e31fe4f92147046d075abfd9babaddbc6652a835d","first_seen":"2026-03-14T22:06:30.317287Z","last_seen":"2026-09-15T18:24:00.355711Z","times_seen":18,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.317Z","timestamp":1789496601317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546731\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-15T20:45:21.909269Z","times_seen":65948,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":21,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.411Z","timestamp":1789496601411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546731\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-15T20:45:21.909269Z","times_seen":65948,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/fa-brands-400.woff2","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.418Z","timestamp":1789496601418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-12668\"\r\nexpires: Fri, 25 Sep 2026 18:16:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xgi63U%2BoZdH3TsbQMxiVr%2BfsFsxFpmlmTTECBaMXdHme1tTX02h5z9HsxHufKY0qCrP%2FJweAnJslCA9MULSQhnAJWxtijGVz%2BvOLAbB8a65iwTnQub7cyWQC%2Fqu%2FxBWrsQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97eebf5efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75368,"size_decoded":76152,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75368, version 330.32636","md5":"859c4002d9954718cac1ddea5555698f","sha1":"2392ce297c92bcf2c7d5a4c461a582dadc8039c8","sha256":"5054ab369966fea3657ac6af00c3bc47bdc9e7b5114e61d1764be06213ca9781","sha512":"83ca3cb14df9d05e3ab2a45042524733790977e5e1df9a47dd52394d4e209da643728ab47ccebb56c1f9ad85501cf074ceb0f2cc5ae3f6ac6a81d967590d13bf","ssdeep":"1536:3votzoJ1K9hFGhTaNK2T2Ihn/KqymF7nTDAYbbaufVZZXyme0kml695:Q81EakQ2T2Ih/bjcY/aCZXvj6z","tlshash":"127312252ed02e2eb70585f7548b8c1bba191420f3d4f0a1ef1b3bbe185e6d5726122b","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-09-15T18:24:00.357334Z","times_seen":3314,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_1.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.603Z","timestamp":1789496601603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_1.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-8208\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRBdKT3QyDOLOnqnhvciqAGN8a1LGP47QHVWCJCJfb7g9iNkCMas3nW3MI51%2B8%2Bsiab0BOlug9foSF3G0RprKTIQM44BTrb8DaJMarZJEg9YwwY5D7mn9t4jjbeguNBIzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9801c5cefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33288,"size_decoded":34077,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"08dbc63b0533b273b43cfec59b07675a","sha1":"d41bbede3f53d6edeb8cd76f626696c916be9b13","sha256":"039cc4d530c09aae9d80da27f0b1a9bdf9885d961413ff5af751d29a3644542f","sha512":"5981a2de1588ab1d3a001cf63d7d60f379c6cb9a13c8216c083e62b142b74e4385889d1889f996ab96b679eed9f6b1c76abe128cece2dfc281addbc3773e34c4","ssdeep":"384:ieNn9DprmU/8HxLABPttPA+6OrXlvJVPiYKMCVLcRfQE/KT9QS1eCqzw8tkXSTg/:ieN9lrmRLABQixVPmMCNcRvCqcRCu","tlshash":"62e2a4c5c33dfd40f6189739a3daaa171abdb202fa6e0b699cc204cd14d88d3d9d991c","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-09-15T18:24:00.357954Z","times_seen":174,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:20.945Z","timestamp":1789496600945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdg4iKRlN3tJpex%2FnUWqWBonlpLR8TzjGaq2FUJ0Vt0VI2Tp6vEH0L2a0U6Bu5GAdGw3Cs%2FX%2B5Ucy0usPkpfEEaeItw4pxGMY1c2cI1x91yf9Slu0t2kUfJlai6mfUAFKw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec5ba5-1b67a6\"\r\nexpires: Thu, 24 Sep 2026 18:50:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 84784\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97bfacfefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1796006,"size_decoded":240620,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3f51ad5812e69d6b349269ece8fb45db","sha1":"2e67f8e068498b11c1aafb4d7995383963b17141","sha256":"9451e1c8dcbb1637716c3e7a73d59a6295a2c158a237b2232fa44a617f7110a7","sha512":"7a5a9ebd889625a19df057f6319815ae4a22bbd89337d9e92821e12949fc96d51491d9ff522f6decab292396330f084625f413721422069a0e97ea2c14150719","ssdeep":"6144:9kCQg5MQB+qehN2pUk46UmtauOKPoKd+tcXsB/06DD1:9kCQg5MQB+qehN2pUk46lOKP7KB/06DJ","tlshash":"6825e7a0f4a024ef3367cd7db1d0f6492a1711e2d6820fbfb0a6d4584e8955e21b7b39","first_seen":"2026-03-14T22:06:30.314768Z","last_seen":"2026-09-15T18:24:00.358565Z","times_seen":18,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/lazyload.min.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.147Z","timestamp":1789496601147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/js/lazyload.min.js HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxSExdrKL9GIFRStDzNKbrNCNKCR4HT31QrIpyOmt61jS1jrsEzJzlw5iUNEL8ULUX6C49Jw491%2BDGbBBzoOEGJVCdHQ1DZ0j4maWuKOqX%2BpPNKMiGJ9iHEKdG%2F7RTv44g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-1ed2\"\r\nexpires: Thu, 24 Sep 2026 18:50:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 84784\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97d3b4aefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7890,"size_decoded":3499,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7889)","md5":"d18523e4a4aaa9420a86e4dddfb07554","sha1":"fa22a3d38dc3c87ca92f1456846682abeb696b96","sha256":"6e86a52a9858206302e32036d89907e3ac87762055e7f9c6364aec33221b3e41","sha512":"5290650d7a2a12b6c2bb65b0a46bfcee46d4058afdd0999d7bec1c7db5acd35038ac6a820e3dc2fd1d3dca50776e9a2690bb0476f63fd1746564cb7d7329ecf5","ssdeep":"192:hXVUD75/K/x4sGDkPq4rL6Z3jGXnxMXR5blzw7fu4:hFUx/KLG4qV3jGuB8u4","tlshash":"0af1ed0df95ab52e3d23b4b5531f120a773a244374434454a6ace6d4ae7c88f2963fbc","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-09-15T20:38:54.99832Z","times_seen":9744,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_2.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.532Z","timestamp":1789496601532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_2.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-fc7c\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZg%2BsNTrSsPG0fHk8va4W7%2BGZe5Lew6ZZJV3XqX%2BmqJsIc9q8%2FdWZOyoPHmBL8buHdoYe8csiKKybtokGBDpkMsgQuHboEasrIMp6%2BfjBC%2FTw96G1i%2B4RfW9gKqgXuAUpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97fac35efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64636,"size_decoded":65435,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"d1842dee8de5526cd6c680ffe4da647e","sha1":"49889cd615e17d50a480847f85e11d86de02d197","sha256":"c640b4f47c03e843d03b668dfb3f415f2f153316cf088d4a59faed6665a53098","sha512":"4029d0cc32c50879a737907bbdef7f20bb9c1e6b28d96d2801ee4a1b28b2d5a8a941623c07bc27b04c771b04b1da5df6df65326057dfde9b1c18dfd4b134b8e8","ssdeep":"1536:2R7U3EXJdeK9hXLMCqtryJTy988P6AWgD9TVk0jX:i7qIhjArtWxwxWg5T6+","tlshash":"e5536b43235effafc49239ab6c1421370d96e2885b373be195c99d0486056b94cb4baf","first_seen":"2026-03-14T22:06:30.326198Z","last_seen":"2026-09-15T18:24:00.359664Z","times_seen":18,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/images/20_hunter_st.jpg","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.358Z","timestamp":1789496601358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/images/20_hunter_st.jpg HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-d9b7\"\r\nexpires: Thu, 24 Sep 2026 18:50:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 84783\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06mhVScHCaYcatl9biFrN6jZgEUu%2FTkJsF6GnhNXpeCknb861gxVTfUAwFfmnZpwXaTZwlDrNBei1aThHTlx%2FvMfPUewwwsIlyYDiCAoDVjHBmGIYMLboXVTJfl7VjxoQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97e8bd1efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55735,"size_decoded":56509,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 620x350, components 3","md5":"5bebaa311a092cacc9cb28c27a4e315c","sha1":"669ec3dd526adf8ea56d24ff20b73a5ddc4c6dbb","sha256":"c0e37a0a2d7e17814bc47a028d3e36c617da5fec64fa0223444beff4f8bc9ee8","sha512":"789e7eda3b235270e48da1da1a3497a1a86cbcabb9a8ffd462c683672c6c14324047d2c431c52f5fcdde7fd703621cb217fb95c93d887200b4938ec47a3b25ee","ssdeep":"1536:jk7dlAvxjTB9+zqpiXWfOJ+cssmuFzHaVfGpsbh2d/IezN:wsyqpNOwceu8hGpWh2dBN","tlshash":"b843027e93efbd08a6901823d18c5d17fd0291539643b476ee5c2e88e9ce618b0c262a","first_seen":"2026-03-14T22:06:30.345112Z","last_seen":"2026-09-15T18:24:00.360204Z","times_seen":17,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/images/cropped-OIG_logo_black_sq-32x32.png","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.476Z","timestamp":1789496601476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/images/cropped-OIG_logo_black_sq-32x32.png HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=6,i=?0\r\netag: \"67ec5ba5-43c\"\r\nexpires: Thu, 24 Sep 2026 18:50:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 84778\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7G4hQhDLtf9eNa6HKK7dgStmIWdbv3PfYn0wMtP%2BnTI4EgNhDUXsJqlKzhB4nmMbSmKdd49mU61hTvTWLIY6bKSno6wbP3ZdnDLZiFmlPbl8ikO%2BMyJ%2By8n6IzivKQL78Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9809c7fefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1084,"size_decoded":1860,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0383246fa1a5cc5e585a523ed5f9530b","sha1":"efd7bcc0737a4e44a688c0b3b76d8e96c4eaa7cb","sha256":"f90f2703149218dec4e98b4c80caab4aea10d10a905a20589663a2f33fb94432","sha512":"32ba0bb6afc76bd2c824efff7f775ce31ac19a7b7c0aa9f54e296785f334bd67faad1c4f5de92d38f3f6c519e49d83a746b02046536443a3bed877bf850d7ea7","ssdeep":"","tlshash":"7111863783073e28db4e16b7b920aa37edf4e2b01ad409c81477a5f999bd001c5d3b92","first_seen":"2026-03-14T22:06:30.327349Z","last_seen":"2026-09-15T18:24:00.361212Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/03/Sydneys-Airport-Train-Airport-Link-International-Terminal-Station-Level-e1392634085116-960x360.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.788Z","timestamp":1789496601788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/Sydneys-Airport-Train-Airport-Link-International-Terminal-Station-Level-e1392634085116-960x360.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nCookie: __cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nki-origin: g1p\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JAs5LzSCXiReh%2BHI3iNRbUmagZDIPRnckTps%2BZVhMlUAsIVMvSVvT6L%2FdLuc8F5U6elE91c5OjIPk%2FW87Oh9j6TRIi60rtxuzit8YhC%2BMZPbO%2BElbSqKa7Vfx1NCAqjGbPcu5zlE%2FhlZg%3D%3D\"}]}\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34576\r\ncache-control: max-age=315360000\r\netag: \"5b8a649d-d69e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 10:06:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nki-edge: v=28.5.0;mv=99.9.9\r\ncf-ray: a3b9a9813b3dc394-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54942,"size_decoded":55830,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x360, components 3","md5":"ec948012d1f084528ebd8b6831631c3f","sha1":"82f3c6346f9064441d3456f88cbb14849daf12e5","sha256":"ecf61e5432718509cff80c06b28f1dc23cdaaed5e7fb1fdc60122b6f050e6c4d","sha512":"079ad5566bffe5e4eacee258a678347f11816eaa459d6f23b27750aecd4fac2382e317a766f3718ed9b57d84f2a41b8520dde7d622195de947948671e826aef5","ssdeep":"1536:BWKUl5/2JxnrmdXyD1/WDxwClxMCz3qlJBb:EKy2PqRIINwxCmLb","tlshash":"7233018d925d8fc70d39e7387eb418edb134e2569106eb70f928e907de1e2806527c8e","first_seen":"2026-03-14T22:06:30.342132Z","last_seen":"2026-09-15T18:24:00.361758Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/gtm.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:20.951Z","timestamp":1789496600951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/js/gtm.js HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:20 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FkOGFACsCivYRceLJ8nF7CB92IOBeuwXs9VyEz24hL1mciTGBNWwQZLNxoXi4vUN3U%2F0%2BOoyd%2F2PyCfDkOBOmzu4eqiNyjgmjrleoKoUXYEKRKk7rmfxgi%2BpuKcQfWV6dw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-351f5\"\r\nexpires: Thu, 24 Sep 2026 18:50:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 84783\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97bfad3efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217589,"size_decoded":78168,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2345)","md5":"d58ca22ccde496f0fc4d941952609e0c","sha1":"2ae7348becb448b3dee9085e956fbc71c3ba63dd","sha256":"cb38b203ea6362301c00a506f5c4094f214ecd7c0638c3dd4cefeb1542724de2","sha512":"cd65f8cfc7fb8908cb3bbf7ed0fb1b1e653e2c5deac9e578fe19728de6c960be6beef06de4b0d5b5ed937bbb9fa262c18132f2efe8d132c96efeb66440a65bce","ssdeep":"3072:gBax8eulMYeHToG00clXoldVQbQwM87NzgOsEemtJeN0ZzVDlGL:0pmFslqdUd7DsEemvemzo","tlshash":"ff2408d8b7d6b42683a36478503f014bf17a6dd2f80cd894e146d4d82e74aa9427bf7c","first_seen":"2026-03-14T22:06:30.328627Z","last_seen":"2026-09-15T18:24:00.362311Z","times_seen":18,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-55BFW9XC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.144Z","timestamp":1789496601144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=GT-55BFW9XC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\nexpires: Tue, 15 Sep 2026 18:23:21 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 174816\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522661,"size_decoded":175420,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"aa0fd26228286900d3e9fb17eae30657","sha1":"bd9ab3a9f1a3b7a15fffc316ac7a65bde227d994","sha256":"87006ca841c6b203af23ccb2cf785a90fbcd8af0dfaa46ee817036181b4320f6","sha512":"ab9e3a9546d3654ec3b272c56e73d0dff94ba267773a77ca607dd5c032877dc45050899d7cc6b2059c83d90dcb7ccc2191600608830703a2e2c8af2a00aa42b4","ssdeep":"6144:YIdn1KcIGUPWmJhgYcYnsLg2cRtbJEqq3RtwfzA/y2EIwtgT84axr:HC8seoJfUVEIs","tlshash":"48b408ce73c674229396f174903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","first_seen":"2026-09-15T18:24:00.363533Z","last_seen":"2026-09-15T18:24:00.363533Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":57,"receive":46,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/images/sydney-2651711_1280-e1522054677941.jpg","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.355Z","timestamp":1789496601355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/images/sydney-2651711_1280-e1522054677941.jpg HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-1b3ee\"\r\nexpires: Thu, 24 Sep 2026 18:50:17 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 84783\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F93E0sLwzilZfx3N8cBsKQeFOjDQom8jVx5XQF3zPNeIWHipgjv42Lypn21hgVH0l4Q%2FSzedv9lku3HvBpPfJWTGSnJaB5Rr1TwXXQj2%2BNNsC0mO0pCX73nECRHuRZeJkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97e8bceefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111598,"size_decoded":112376,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1110x494, components 3","md5":"4c4c7084023a63ebce36104668659506","sha1":"43782098fbc3422819d10d6e86db8d3ea76cc562","sha256":"05b4d47e3bd4bd6910b007ee813462997009f75cc4bdeffcc823e30ecb9ac563","sha512":"4ccfd3dca669dc20aa8141f2a695c50e96ba367451bf812cd744f2c716dccad52288ab2a0470e56c105bdfa43a14bb23c862dab29efe0b012c69c1de0a47328b","ssdeep":"3072:yg6KzWoB5aU5WEaoqozjwnFVgqXc3suxHJAMQ3:yg6KzWoB5azozm1Xc3ssphc","tlshash":"a0b31218df036de5708f5e08cc899f8d61833589b386c38982b2b04585f89f3db96697","first_seen":"2026-03-14T22:06:30.304104Z","last_seen":"2026-09-15T18:24:00.364909Z","times_seen":17,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.606Z","timestamp":1789496601606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-18d48\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=smwONZhX0s91gWDKRhaL96Mljf9ZwTq1WiNKVZ95PGc9i5WVZFnUvVHBeysCYfG%2Bgv06YJClqmxDbaHhp9LbJATA1PKzBRbrhebx7alWACGTBnGCEoFhVG7AxGD5UiwBaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9801c5befc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 101704\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101704,"size_decoded":102493,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"59c8d4ceb52f178f072abd520ecdd7ac","sha1":"92c7cc680c67895315bdefe933251f660edcc900","sha256":"6e00ae0800a05eeaf082032723acd8ce33d65adbcdaba52d683ec37b128b0aa0","sha512":"9f6c46ffbcbb57557a1319da3de753416009b3c0b035e6557c293c32775a8e36215e737bd8ae018a6da87a6d93c1a580492fb19fcc5d72d5ab49abe89709154d","ssdeep":"3072:9eFYEoAn9MkHhoIbimbF092/MnkXENRnnxMpdWWWWVa1U0rWejcItq:9eSrQ9MGhoIbiuq92ZXEnnxMpdWWWWCa","tlshash":"75a37c07639bdfcac08766fe4d2460634df6d9151b2feb27698a4c14e1150e88cb87af","first_seen":"2023-04-11T08:32:15Z","last_seen":"2026-09-15T18:24:00.366106Z","times_seen":35,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.319Z","timestamp":1789496601319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546731\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-15T20:45:21.909269Z","times_seen":65948,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_5.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.533Z","timestamp":1789496601533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_5.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-d09c\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Fp4huEcXZXIl0u6OnCaHir2%2F4wUVOZBCbnENg2k%2F7P5WIVZpvgajBDKhDAhGHy4w7hUpxB3oJ3QNDgNowbV0eouFM9rKSUM3bkYwY7qKVjP1SrX9BhhTfyn6JYCP1C9%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97fac37efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53404,"size_decoded":54195,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"091840296f772e8d68d6547e2b6c3043","sha1":"214718f9ae9038b92c53ff59cab7da60a2a09e87","sha256":"20fe3a5bb993ea3503bbdda2aad0ba3aaa979768301a771f2bdf818b195fb1c4","sha512":"7f2897ec12bb61a11fb8571bed62215ac6dc6015f55cdf4968f68f4bede568bc8ad53953993b2aba9f57f43803e6515aa5ca866d7c1664801753414c710ff05b","ssdeep":"1536:XShyGkFNTdYqnnMPSAxEPYArfBMQYbYKsAUK9Wta/CfKn1YaKWxR:XShyGkFddQPSAxEPYArfBMQEYKsAUKim","tlshash":"dc33083be6f3fe65d945eefbb444f05009ff8220427e87ce568a492ad0090709d68b9d","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-09-15T18:24:00.367182Z","times_seen":182,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/04/phillip-st-parramatta.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.790Z","timestamp":1789496601790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/phillip-st-parramatta.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nCookie: __cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nki-origin: g1p\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w0PX1AAGjFubnseAl5dEtM0s62SHViQMw6W0grQodzlkS1%2F3j7Xw38BqXs6KsjSDxt%2Bu%2FeWLkX9jZKCzdNJsHWV3RuB1JsF7hPsr1Nj1W2x7IOPqepUHs7dpqj5CsQctWbtIverDa2tHKw%3D%3D\"}]}\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34575\r\ncache-control: max-age=315360000\r\netag: \"5b8a6155-bff1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 09:52:21 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nki-edge: v=28.5.0;mv=99.9.9\r\ncf-ray: a3b9a9813b3ec394-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49137\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49137,"size_decoded":50017,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x357, components 3","md5":"fbddf08f0d2d6d45174e91d971a7d0df","sha1":"9d107e3393ff6835647b842e8535a4dd6b9e3439","sha256":"b0795091730fc57e97d95d2899f5215eea19d6a8e22530c52d4344588c5cc38a","sha512":"c6bc7a26068d12770cb230b0fc8a422c326900e7ca068a50099381dcaaef52951b451d73b304b54023e488c47b16bed07de766af7d88d3f42110939b871bc831","ssdeep":"768:W/1pGKjD1CDr5fQERON2ql/XRQRIZPHmbpGUckPwVR5Ew0yZ+3fpqDEHDtkfAFfU:WOKnOrGE020/mRePbULU7/g3fpqDEj+T","tlshash":"21230286f71cb968c4a279303a104f712f19e9ea387507a1302abf977e557e081e72f5","first_seen":"2026-03-14T22:06:30.334794Z","last_seen":"2026-09-15T18:24:00.367733Z","times_seen":17,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_3.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.605Z","timestamp":1789496601605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_3.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-21cc\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwWyMhB4%2BpaSCDAQjxdiRFprKNdytUtYzhDUn3Pr5MMSWkCWSsZRT4xAqNQX3oyH%2BgYYKtNhCNIthyDIcB8vxW2cPS46TkRVyV3fuTATYjqyGTf8PW0LhbEHMdwTYp5xYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9801c5defc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8652,"size_decoded":9440,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"fae902e7ca8f8f2f477a29cb6defdf48","sha1":"98b1f2024fed612be44dfe6002cbf62e43f1bf6e","sha256":"1df6b7c4bfc8b3394909576e4519180f1198e12643084f7b60ee69d72fcdd7d0","sha512":"917409bcf0c17c3409e3cdd4a74a1866fb75cf68a9bc005bc380f63cf85dcb170eb42cea43dfc43ce3f70bc5523bba4016267375be10d26f71811ed137494d27","ssdeep":"192:zWJgJYIUINTkRjvKKmJvX7sJIw/eeyJGQfDbDukABrihKL1K:Ug+IUINTk0KyJw/+JG0PzA9G","tlshash":"59023b1e5699df5fc4a24fbd8c4a8a5c8b6dc9509317638a66ccce6aa4321400dfdf0e","first_seen":"2023-04-11T08:32:15Z","last_seen":"2026-09-15T18:24:00.368301Z","times_seen":43,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/04/maxresdefault-e1523239998378.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.787Z","timestamp":1789496601787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/04/maxresdefault-e1523239998378.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nCookie: __cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nki-origin: g1p\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UJ%2FFb6nfY9Bm%2BQGi5gjQOcCN%2FclMZxFO5VEDejgoFSqNItQnLBQh7uct5EfPIM4JFRdj2Fut9SjlIXHJSWXr5EGeQEVYPuTeHOeeFbcbmhfzkBu0Op2hjsyS4hG8ANbpe23l%2F90vXud1Ew%3D%3D\"}]}\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34576\r\ncache-control: max-age=315360000\r\netag: \"5b8a61cc-12172\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 09:54:20 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nki-edge: v=28.5.0;mv=99.9.9\r\ncf-ray: a3b9a9813b3cc394-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 74098\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74098,"size_decoded":74981,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1110x396, components 3","md5":"8d2c875639dacb8f8f099cd9a3fb8bcf","sha1":"067df29b0306b31abcccaecf340120092ba88643","sha256":"ddbaea7941db17cccae4c10e48cdd2105d73bcdf373b2a28c4d8d5a087e18b84","sha512":"4c0ccaf0b3e01a08bcec567505c77bf0cc8ca01c0c7ffc2432835839a19efb1b0fb7fd37bdd00a7e07e32ff5d7d24d3125e331b5b27cbbbd70d742e7162832aa","ssdeep":"1536:bgA/CMst17QE7r9hsGbMoj3SddgzUzjYLJQpOpsBZhsUaTTSAm+fSSq8IgPqAm4h:z6Mst17F7kgSdlzjquO0sUXAXS7cSAmI","tlshash":"a57302088e91edc514c46feae4202094c51a0b22a77dfc2a9bfae741e3704c2f1e575f","first_seen":"2026-03-14T22:06:30.333552Z","last_seen":"2026-09-15T18:24:00.368873Z","times_seen":17,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/fa-regular-400.woff2","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.415Z","timestamp":1789496601415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-34fc\"\r\nexpires: Fri, 25 Sep 2026 18:16:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UyTlwNSf8UK0eNMuRZ1tKCQL%2FKPV2j6JHpMdQ3ImQdW5URbZyM3F2J1wXM3vv8AZu9P5hr%2BFPnq9qa1POLJm%2FT9fCq5%2B5EGwmlNzg5H8TuSpqOmL4GxKK2Pp3%2Bqjp%2BW9TQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97eebf3efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13564,"size_decoded":14347,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13564, version 330.32636","md5":"e7d4bfa72a1f7d352fa6605501a3e2f2","sha1":"afd94b571eff9da7d85490bdb4c9874419cd260d","sha256":"d144631af733437b73fba8e784ab694a97fab80476e82325f7a58f6408b28850","sha512":"073251ecb758fec4077474e741765ed080adb016b9580d130ce2f5262e2cf2235143439f7d387a4a8d3937ea3b61e3449752038aefcf37fed0890bdab1681704","ssdeep":"384:qxPlVb9GS6S7RzoTcC6mxHnTI4p3seFfigi:qJlVb9GTSmv6mZnrxsWRi","tlshash":"1052cf83841355fcc6863effcea2fd246058e58cf3127659bc598d85a26e1934faa11c","first_seen":"2023-04-07T02:44:41Z","last_seen":"2026-09-15T18:24:00.36947Z","times_seen":2343,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/03/OIG_White-1.png","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.472Z","timestamp":1789496601472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/OIG_White-1.png HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nset-cookie: __cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Tue, 15 Sep 2026 18:53:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlmLbULUd9Zp4r1b2Ycy%2FEKrbB42tNq4tfG3mfTKDFiXQY4edEzmyCnxi7y28Ubc%2B6%2Bso5QAyWgSeKXtuNjhDfhM4qm36Gq3TgMof3sIUANw%2BuwSvILi1TKGVz8pBB6O0qA%2FrL5tyhppHQ%3D%3D\"}]}\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 484760\r\ncache-control: max-age=315360000\r\netag: \"5b8a64aa-2ab7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sat, 01 Sep 2018 10:06:34 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nki-edge: v=28.5.0;mv=99.9.9\r\nki-origin: g1p\r\ncf-ray: a3b9a97fdaa2c394-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10935\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud","quoted":false,"path":"/","domain":"www.oneinvestment.com.au","expires":"2026-09-15T18:53:21Z","raw_expires":"Tue, 15 Sep 2026 18:53:21 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud; HttpOnly; SameSite=None; Secure; Path=/; Domain=www.oneinvestment.com.au; Expires=Tue, 15 Sep 2026 18:53:21 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10935,"size_decoded":12156,"mime_type":"image/png","magic":"PNG image data, 600 x 327, 8-bit colormap, non-interlaced","md5":"21c2ea2c61d17b118c7de73453055f0d","sha1":"3fd11dc87c59df429082f03799c7ff02936d7115","sha256":"d9adbcf028648f70e382d3d437bb82d88c57a7df77d02448780e663dae446e01","sha512":"239cc189b27a1fa6f13e40445dae868d039c77c8ace809ec53d7fd7dc0431425e139dc915cd37bb8c73d590e31870217d9e9c0b5eced647adf5eef4cd99838c8","ssdeep":"192:2N0UcGD3qQBny1tlHEMFTwDPS1rHtmHLOPRwKzX5YJNR4NFuITxp:PGbqkYDkMmDK1BAOPjXeN8Txp","tlshash":"4f32bfcd4c91dffc97bc5da67d52f91822a90c11c1c93c8bec8279007a35999a0b0b9a","first_seen":"2026-03-14T22:06:30.29354Z","last_seen":"2026-09-15T18:24:00.370004Z","times_seen":17,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":70,"connect":42,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.847Z","timestamp":1789496601847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461143\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-15T20:50:01.225609Z","times_seen":295967,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MJMSMFP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.290Z","timestamp":1789496601290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-MJMSMFP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\nexpires: Tue, 15 Sep 2026 18:23:21 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 15 Sep 2026 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129690\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":371839,"size_decoded":130320,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4971)","md5":"0adac3bd3deca34b59e4ee6c29f8f5f4","sha1":"f74a707eece39d82d0d1e8a17b74a4c874401787","sha256":"31d8414cea40fa5126c746e8eaa0d5d571d910b492ff088e2594d116b2d16d53","sha512":"9c7a98dfde747c06eaef9ef268d763d8be7a2a93e26ed9997e08a5974911b402f584a76fded1408f9b249ed603be5031bdda88c0e0ea44f6a96c9c852228ab0e","ssdeep":"6144:IWn1KcIOPImOh9mHFLgycRtbJEqq3RteW7ALfHneEr:Ip0+7Wc7+M","tlshash":"268419cdb7d6742283a3b574903f014bb23a79a2b84cc894f286d9d42e7465a5237f7c","first_seen":"2026-09-15T18:17:26.026275Z","last_seen":"2026-09-15T18:24:00.371125Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.322Z","timestamp":1789496601322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: sffe\r\ncontent-length: 1621\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T20:51:43.703029Z","times_seen":18482263,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/images/bx_loader.gif","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.834Z","timestamp":1789496601834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/images/bx_loader.gif HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nCookie: _ga_6DFL3R5PGW=GS2.1.s1789496601$o1$g0$t1789496601$j60$l0$h0; _ga=GA1.1.227243082.1789496602\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/gif\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=4,i\r\netag: \"67ec5ba5-1ce1\"\r\nexpires: Tue, 22 Sep 2026 21:49:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 246859\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ljURAcURiedCS30kXiz3UQv3%2BhKS8nyMpWhdwAB6F7kYfmgezwPy3JbYfG%2Bb0%2BhuQumHh2m0q%2FiA8p%2BQUIgA0SgplNluland6M%2FyuXazB%2B1V9g%2BXj5A4IZ%2FQ%2B6jIt7fgVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9818cf4efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7393,"size_decoded":8182,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"522ddedafe08a5b8be1af7bf07d198f1","sha1":"e267a02ed18cef220bd1cf21ae2a00fb25bf6c01","sha256":"e431bf8a8f32c7f74b782c625624dcb483a7a091d4bcdfb7afcf6e0c0dd8bb2b","sha512":"7ce165ca363853eb831e2c4057262c69529254df5f8db49f8fb7aaa92e15a990a4236260d3483b400aae5963d2d7fab1f2ccfe0afc90a723f78a876ceacdb8ee","ssdeep":"192:nTuBnR4FgyOFIf8H4V4IFUwt3Nm+kqhlRJY:nTuBnmFO+fk4swt3NLnC","tlshash":"36e14b56909a500dfcd8e5716fac2098c5df9be061f8b09ded9d57032b2f39221887c7","first_seen":"2023-05-16T22:18:54Z","last_seen":"2026-09-15T18:24:00.372232Z","times_seen":151,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.335Z","timestamp":1789496601335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3328230\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oMlPzH233Dgo0MPf4PSPEejGalNWKRkPh6F95tkFGX8NFjHeL2wO68GGCA1M0x4GeKz%2FU%2FhTnfFUJbmWAvf9vXqbe64fBMULjAn1Q6%2FzwnuTO2Xk3hUZUE9NPDcayFKbf%2FPH7uL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3b9a97f4f3b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2771,"size_decoded":2066,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-09-15T18:24:00.372801Z","times_seen":16761,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.409Z","timestamp":1789496601409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546731\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-15T20:45:21.909269Z","times_seen":65948,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.149Z","timestamp":1789496601149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/js/b0f35be9c11b8a0c65645d3b351a8a59.js HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRZGpvkIR9lC9LDmv661%2FbyBww5VzmJFswO5hTx0ManbbkK6mSS0FTO%2BnZerNIhQq1bi3Wl%2FfZ8WPI1v6pkV%2BdmN6HJlG%2Fbc4WM4no4Bzxc5R0TGKsTEYkttiNH3sUz20A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"67ec5ba5-6f642\"\r\nexpires: Thu, 24 Sep 2026 18:50:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 84784\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97d3b4cefc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":456258,"size_decoded":122006,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48845)","md5":"ecfe7e57ec382e297b36fc266f53d999","sha1":"566e1d665ed3eb27d52b934b1fc1afb40363ca73","sha256":"865787ceb6ce3aea45c2510f2a8fc034df3b8ce21c137d7d3687e3bd0704fa86","sha512":"a224903a07b4d3a8df4971eb556b5c6f7f3331626266032a9775b3fba7c80601c17aa723dba4d3d14acf529e701db6fd3fe092d1b86a31e4e991652682e15f98","ssdeep":"6144:0rPU+Jo0FQ8zcFQk5fvtgDC8FaCC4Pxo8SOUuGaNPPdqJuejp9s23OOk0:MP80FQ8wlgDC8COgHJuejp9s23jk0","tlshash":"e1a43c85b31834b342ff21b5906f530a723a5569d906846cb8b8dcd82df8c59227bfbd","first_seen":"2026-03-14T22:06:30.343439Z","last_seen":"2026-09-15T18:24:00.37337Z","times_seen":18,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.414Z","timestamp":1789496601414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461143\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-15T20:50:01.225609Z","times_seen":295967,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/api.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.146Z","timestamp":1789496601146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/js/api.js HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ft86PJ1Fa%2FnHx1MwqZYuaITUtk0NyPvfBts9bn9p231dljVMscPilQ%2FSNN8q4LObHNPEaPAJsffE9P8Pi8LOciDl2jULCFL%2BenOZdEQKaYTcfdbn2%2BgliX%2BucLTdBLMQtg%3D%3D\"}]}\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 24 Sep 2026 18:50:18 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"67ec5ba5-388\"\r\nage: 84783\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3b9a97d3b49efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":904,"size_decoded":1391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (904), with no line terminators","md5":"5b89c7b075cfa2c6674a1efdac61eccb","sha1":"447a4523a7c83c18e875eed387dbeeab8a9c071d","sha256":"e8fdf9ceb2e0e67d350912156ee1e2841ec16088f50d4e72f5a65286332394ce","sha512":"f9aba0ddc753b6ee2a11de767dae0680caeebc25f45740495dffc66d7e8ec6468706ee394898bd52ab1b76d301c4e4cbfbaa392331f014914be96e674469b82f","ssdeep":"","tlshash":"3d1140ba1514b0315f231af4e4fbdfe1f481a028f12888d08415ee842e798d7ce15985","first_seen":"2026-03-14T22:06:30.321926Z","last_seen":"2026-09-15T18:24:00.375186Z","times_seen":18,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.316Z","timestamp":1789496601316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 10:17:38 GMT\r\nexpires: Fri, 10 Sep 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 461143\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-15T20:50:01.225609Z","times_seen":295967,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":17,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.416Z","timestamp":1789496601416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/raleway/v37/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://sashumohan.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48264\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 546731\r\nlast-modified: Tue, 09 Sep 2025 19:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48264,"size_decoded":49077,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48264, version 1.0","md5":"e401cae7a12911a5c9752dc7a62f9dd7","sha1":"5685dd613a8a8211bf60b4b10753a47587bd0b60","sha256":"b1bef1f03a77a36fc257c5525e32a1dd621bb6f935b743a419da7ed0b18dc8f5","sha512":"dc8b6f28bc048efb508b482199c958ffaeddf15431aad34544f5b9972fd8c19e0315f74499d5549b30e15a03e41bfaf2a30613b6889b9a693a9c87c4e872e1f3","ssdeep":"768:AWHBpvVWVHIgyYwXiDAOa6GWeFGaCfLBc/qiufIdQRuEl4ofxl8VKme:AWbEIgmi8uAFCfS/OfUYuRExl8VFe","tlshash":"1123f2e56c6a826bd88c882945ee21c1f3d7f4927713d149e8fa5df8c432c05ed5066b","first_seen":"2025-05-29T19:02:42.430777Z","last_seen":"2026-09-15T20:45:21.909269Z","times_seen":65948,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/images/cropped-OIG_logo_black_sq-192x192.png","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.475Z","timestamp":1789496601475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/images/cropped-OIG_logo_black_sq-192x192.png HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=6,i=?0\r\netag: \"67ec5ba5-305b\"\r\nexpires: Fri, 25 Sep 2026 18:16:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCRchr8NjMS3xli67dgrocP5laZ8abp%2BY24ggK3JRIAGcieSzK1i9AbHmMQ4qTGLn5CoS1xiNjRY7DW5EacbhI7OSUKrjEnp1%2FvnV0kDjz47bKMctduvmBHhd55zeC5qBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a9809c80efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12379\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12379,"size_decoded":13153,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"37f8cae3616dbc93f3bc38ca76089e7f","sha1":"2d33bbeb34383b55fac4d8efc41072f8b62ce35b","sha256":"b0bd8b7ff6890f8d2928176aeacd6c90ec04e43a124a86778e3d0cb463a0f18e","sha512":"16bf81ec9912b4f7c04e5b7976f0013d7032897a358463894c55e77f29728f1f9e7157519e3898f599d8ce24f392cd92eebc806d7231bccc4184802eae926e0b","ssdeep":"192:3BeBwh3U/Z104XuxJao4oYsbBW5GowRrBg0v0XTHfsNcccxPcB+wmGwXLtgz1Mu:4Beo7hPodWiqjX/vXLGP","tlshash":"0f429ec59f1e01d00ffbe06c80f365182aaa9029e271967e9fdea877247c62575c3607","first_seen":"2026-03-14T22:06:30.340372Z","last_seen":"2026-09-15T18:24:00.376504Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_6.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.534Z","timestamp":1789496601534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_6.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-5bcc\"\r\nexpires: Fri, 25 Sep 2026 18:16:42 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AmKFmWgn4pwTrQl2o7162e3Pwtclo0HZR76VjgyzylIM1rTzIOcBY0820TnR78CweAxW812FM2N7g9B5NSvevGOPUrcyafxlIofKOoN971w3X1Oq3lOKdpW1awQ9TXbKFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97fac38efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23500,"size_decoded":24285,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"b5982c58f5e9563e626c8a41608553dd","sha1":"a7be67297c6194c621754efb1b61dd9ced0285dc","sha256":"0a5865af71fcea416a14ee388332dd370ff4c4e0a09ee688d5d7c3a1f8039508","sha512":"68db1e14dcaa030c3b3506627f187edb9089c958032d61bdd1cfea7e9d546636722737c14379a6ad7f8493cb7de25ffcf2f0adf7edef93a1788ae09cb706f08f","ssdeep":"384:6QmONjgg2zJzOuBixHw1Aouc0ZYp79mjXQ3jXR/el6YhNvwCqmnH5iT:6QmO+Jtgwyouc0ZYpwz6/el6YhyCVHq","tlshash":"1fb25b2763d7cf1ad1065b7e102222f10daee431a73a660ba6d30c66ee2e6b445dc74d","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-09-15T18:24:00.377682Z","times_seen":175,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.oneinvestment.com.au/wp-content/uploads/2018/03/615638521_1280x720-1110x500.jpg","fqdn":"www.oneinvestment.com.au","domain":"oneinvestment.com.au","tld":"com.au"},"ip":{"addr":"104.21.0.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:31.568Z","timestamp":1789496611568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oneinvestment.com.au","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 00:21:34 GMT","end":"Fri, 13 Nov 2026 01:21:27 GMT"},"fingerprint":{"sha1":"F7:61:CA:C6:B2:7B:FA:1E:BE:CA:1C:1C:F0:B3:98:CD:0F:32:EC:5B","sha256":"50:B7:CF:F1:6B:1E:C9:84:90:65:F2:D9:61:3B:BA:A7:CC:96:9D:0B:D5:0D:F6:69:9F:D5:EE:FD:22:E6:59:1D"}}},"request":{"raw":"GET /wp-content/uploads/2018/03/615638521_1280x720-1110x500.jpg HTTP/1.1\r\nHost: www.oneinvestment.com.au\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nCookie: __cf_bm=k7v6lRj1T.KI6kthczOlUyGDtiWzvzdg6P.r2APvB8A-1789496601.5868332-1.0.1.1-vAGtNIY7bZin4XlQQ7O..rPHXXeyoawhEt8ABjnyQQTj.COf4hyNSZGbXqN6lIy6XqPa25nG_pM3aqJAgZBa6dlMwJ3yDj69HGuPyJOWRxNuQZVBg7QHZBuZIklguSud\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nki-origin: g1p\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wkT%2Fj5PN481ukrxdzY8zwik%2FlYNi%2B%2BYSca3B1teFNelo5P1eHnA4zwpYH%2FVZ%2BiOVGZK45hYnOffv4N0b6KjAxU6TdkzWD0XipnENGQMJIfJ68V1jM8QuZIDM8ligaTOl93qMANNDBCfW2Q%3D%3D\"}]}\r\ndate: Tue, 15 Sep 2026 18:23:31 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nage: 83941\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\netag: \"670c5d5a-221c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\nlast-modified: Sun, 13 Oct 2024 23:52:58 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nki-cf-cache-status: HIT\r\nki-edge-o2o: yes\r\nx-content-type-options: nosniff\r\nx-edge-location-klb: 1\r\nki-cache-tag: d5d04bf4-345a-48ef-a99c-1c1ef92bc121,5abe3870ae22fc049ecc0e4a7f1b982d1414d596cce9a1b6e6f213d8190ee967\r\nki-cache-type: CDN\r\nki-edge: v=28.5.0;mv=99.9.9\r\npriority: u=5,i\r\ncf-ray: a3b9a9be5810c394-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 139719\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139719,"size_decoded":140808,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 1110x500, components 3","md5":"a3e2ab383159bc87132e26803f70e326","sha1":"3e68e7d5ff25805a0e9f74a058c7ef6f152d8170","sha256":"b0f473f40c51925cc62e2c42a16ba381ef9e64b402db9f75043d136bc11afcfe","sha512":"73564bf60a2ed173befc00b4c7b762c47ca3592a3da7d3dd809447c7dd875f97c4838abfda755a5067c1dbcb64cb62d97e3d4dcbe0016dc5bc8d5f4d687a46b2","ssdeep":"3072:NB1UvFRfMcBzZIADpeCzurzv+Xi2UFtdMttsVf:54FRfPBz7pevvJFtjf","tlshash":"d2d312c0b703b174be1d7ebbe1e70656504af94809b0f78d6b60a6dc7150bf1a4ec26a","first_seen":"2026-03-14T22:06:30.301862Z","last_seen":"2026-09-15T18:24:00.37935Z","times_seen":16,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/js/jquery.min.js","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.142Z","timestamp":1789496601142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/js/jquery.min.js HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwQDJONXcq1molc9mX13py%2BBXQgCzXKCZdvNQBNfpbmr5o5bfaNcRTL1zlHXyZ%2BEei2yDsyAWPBGcVC4vD7T2HrWFLrBQ0q8LC2sKTYFo7tpf99yyqo6GHu6QpuHwTuubg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"67ec5ba5-15601\"\r\nexpires: Thu, 24 Sep 2026 18:50:16 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 84784\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97d3b44efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":31213,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-15T20:49:56.103392Z","times_seen":1057547,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/fa-solid-900.woff2","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.417Z","timestamp":1789496601417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-127f0\"\r\nexpires: Fri, 25 Sep 2026 18:16:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVs0geNh4PfpAkjx8y0g66cqPcXSD0eNqZltAx%2BTvjp5TaMHQaXoIBZsYJDp28x0IFXFyYvywN%2FQkOCCcEvEzjs50N1YOu72tergt08pfH%2B7SkCCwp0p%2BoizEueSI7Z%2Bjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97eebf4efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 75760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75760,"size_decoded":76542,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 75760, version 330.32636","md5":"832f6e62aaf3909d6b94c8a9c1e4dd51","sha1":"4a06418cb56a66af5a1c0f59791469dea1dc87fa","sha256":"8556fd48cf33ca3028e3fff4042979f224987ee317cc9032dd5bba996b363009","sha512":"6ddcd01a3c660f62049415c24c76492d2ac99af465e09bd26c426b2a3c1b66878381cb9a7f2d50fa56b7ba1baa2be64558c7723f3c20d575a3fcb32e120c147a","ssdeep":"1536:eDCuynfMqYjuMdpP1pYdx/Ox3QCm5Ryt4nDcr1hPbvPX/1fD:OWnfUj5XtpYdh8CR/QPbZ","tlshash":"eb73128f784611876cce9eeab50ddce57f6982d8200b962517c7517aef5ca1eb310037","first_seen":"2023-04-05T16:07:24Z","last_seen":"2026-09-15T18:24:00.380682Z","times_seen":5262,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sashumohan.com/lander/hochu-spatb/fonts/stmicons_4.ttf","fqdn":"sashumohan.com","domain":"sashumohan.com","tld":"com"},"ip":{"addr":"172.67.212.107","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://sashumohan.com/","date":"2026-09-15T18:23:21.410Z","timestamp":1789496601410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sashumohan.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 14:22:48 GMT","end":"Tue, 17 Nov 2026 15:22:41 GMT"},"fingerprint":{"sha1":"49:1F:21:97:B2:7F:51:3A:0D:59:A2:72:B2:A1:77:E2:F3:57:4D:87","sha256":"03:58:F4:BD:2A:62:4C:59:BA:E8:9B:92:45:75:A5:0A:1E:69:90:2A:30:DF:B3:8E:FE:08:7A:09:AE:74:A8:67"}}},"request":{"raw":"GET /lander/hochu-spatb/fonts/stmicons_4.ttf HTTP/1.1\r\nHost: sashumohan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://sashumohan.com/lander/hochu-spatb/css/36d8f737dac1ed3ab0eff5febf1320d4.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 15 Sep 2026 18:23:21 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Apr 2025 21:33:25 GMT\r\npriority: u=3,i=?0\r\netag: \"67ec5ba5-3510\"\r\nexpires: Fri, 25 Sep 2026 18:16:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 399\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BlG7sFN7hjXt37aQdfYyPD2%2BGL%2FsBIyV33yNQNuHJKczSXAnIeG6O4gx42Gi%2B3zw5H8uXYmvIJzpwJ0Gcivs8%2BGpuiwUGdNgUpBiNu8eNTDcIwBHTXXVbESNSQ%2BdTN6H0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3b9a97edbf0efc1-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13584,"size_decoded":14381,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, stmicons   ","md5":"94256942e5d031083d6dff8bec2edf4c","sha1":"883d146bcbc89150cdd905c2a626e0ea134083da","sha256":"4f648805ee9fe341ed8f66bd31ce56aea6095a3cc85fb84a9904fada1687a7ab","sha512":"b9e8a27732099d68871d99cb95262d33cdabdf63947e723b85b4cd7d4ab48ddaf3c7ae7e35cf9c4c172cac39850efd58a75eba514a8ce84728800f49ef33a124","ssdeep":"384:wXfb0mLHPHAfK4PAPHxAo5x1yGaZFCuzsWgisz2d438rkx6+kkppDXJ7yg:wXfb0aHPHAfpPI1yGaZgNWgiszq4MrBI","tlshash":"ce5219282ae1cdabc59ac97d1c9f5260836bec102307970bb65208637b7b5d57ec03ed","first_seen":"2023-04-11T00:32:33Z","last_seen":"2026-09-15T18:24:00.381313Z","times_seen":183,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"sashumohan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"sashumohan.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}