{"report_id":"0db1319e-5c74-4bd1-bfc0-ce77169da887","version":6,"status":"done","tags":[],"date":"2026-04-30T10:34:57Z","url":{"schema":"http","addr":"ogaudit.com","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"104.21.31.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"title":"Crypto Social Audits: Expert Reviews \u0026 Trust Scores @OGAudit","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"87c80b5d754ddcba8601d4f2c7a856f7","sha1":"dbfbe46330b447a5075f373e168c37abb16280f8","sha256":"d86150806f4dae52d152ef1d0a424c6435d8613be5ac0ac52e359921d22b37f5","sha512":"55e32a92e1ad1e46f5eb60cf495166491f63f372bf6909260f09dc083753cc41c2c65ee412114cfb15552f9f631a253c4d818910d3d72d320a0a4469781e0d29","ssdeep":"","tlshash":"d0e020e95c75c83464b0038564f5f29c162061507711d74441d8dc7a5f10fe75c52948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ogaudit.com","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"104.21.31.51","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:34:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-26T22:25:05.471148Z","alert_count":0,"request_count":2,"received_data":473115,"sent_data":815,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"img.ogaudit.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-22","domain_rank":0,"first_seen":"2026-04-30T10:35:01.36375Z","last_seen":"2026-04-30T10:35:01.36375Z","alert_count":44,"request_count":44,"received_data":259787,"sent_data":19952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":5,"received_data":352336,"sent_data":2122,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ogaudit.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-22","domain_rank":0,"first_seen":"2026-04-30T10:35:01.3872Z","last_seen":"2026-04-30T10:35:01.3872Z","alert_count":17,"request_count":17,"received_data":2418667,"sent_data":9183,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert2:11.26.24","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:5.0.8","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-26T22:34:03.62582Z","alert_count":0,"request_count":11,"received_data":656500,"sent_data":5066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-04-26T22:44:19.904703Z","alert_count":0,"request_count":1,"received_data":31542,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","size":31169,"data":"","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-05-11T16:04:38.343957Z","times_seen":71307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08aca91af3f4c62e2e95619d062b2fc4","sha1":"1f57faf43acfd68a87c5fca9d0578402fb57b906","sha256":"f824768540a77ca3a73e48753bba1a3984203b3171a5236fcfaeb00b5b5211a7","sha512":"7956bc2d4667f7793b6516a89da8699c253429c07672e511cdca0e88845841fc3e23375fb129321c6c9360df0aaceb6f64d581e2152ae0932c39c52bb963b922","ssdeep":"","tlshash":"28b02b50301270312883103210376d054d530114150c00240361d16efe7eb4f0d8b6cc","size":128,"data":"","first_seen":"2026-04-30T10:35:06.649449Z","last_seen":"2026-04-30T10:42:40.693367Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2eaa510c190f9baebead4c037c78303a","sha1":"e846a52780d028e27c7d088218e35c428f7ed7e0","sha256":"784b77161cb7f39172dde24fcb0845f99ab07bddf25c368123b30fb537bca387","sha512":"d289e309e6ff4cdf0dcd83c7645a36c24775831c106e0953d457e511b1236dface2ff3c5ae7b5337227003b8299aa3058f0c95461965dbea0b6618dfa313629b","ssdeep":"","tlshash":"16d012c9631d7d7445fa3a004f3f7554b05d26119c906d714e55634cb621d175784870","size":210,"data":"","first_seen":"2026-04-30T10:35:06.650841Z","last_seen":"2026-04-30T10:42:40.694015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fefee3e7ad5384a0e541f7415f11f4e8","sha1":"16200a00c5e799af4f1d67976df3c67e59954ae3","sha256":"1a99b83d8e44a5241b5aa306614f4b6056f835085507fd22bda3b1c9b0ec17d3","sha512":"a79eea6d084c6db987eed19290c9dcabd92cb3f3005b805f7914b35b91eabc6c2260d7d7f9c3030ad6b5d5413b4ecc6ccb3456f106fac53cf73a6e5f6c54204a","ssdeep":"","tlshash":"41e0c26c0983513485bb30ad359b8a843b755403608be901bd1c96880fb09e6d120fcc","size":357,"data":"","first_seen":"2026-04-30T10:35:06.651708Z","last_seen":"2026-04-30T10:42:40.695472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"689b75e0ea8dad9c36bca1e2e673d124","sha1":"d95337338cbdd665242ad09884f679a199e72244","sha256":"8f3f0833f812ac2d287e9562a4d521941be9177a0b8b42099956fc8aec25ba5c","sha512":"dc96b04612e97eb311c6b1bb850de4b045cf696a4630574b1b110645fb45abd6a62b9083dc8f21c8f1b7ecbcbf952667980c420a58e81352cacb386e7c739b81","ssdeep":"","tlshash":"0901e9a83cb6e4a20ba33c5da69f4103f9d5a1471c59e5217d2cfe28cf70ae0558ee85","size":677,"data":"","first_seen":"2026-04-30T10:35:06.652662Z","last_seen":"2026-04-30T10:42:40.696528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.8/jquery.inputmask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f94a32c81f8dce47da898abbe9aa6a","sha1":"4b6fa33e2ceae104562ed4ff46367879fd75ec9f","sha256":"e688b01c80a57b4c9346764237665e26d200ac7a77d3c08aed561ba18f0535ef","sha512":"79f01c8d8a184f4b17c5046dc46637ec22989aab0554e230300a5a11baf126be11c2a5551b0f28f8b7e1ffee7d4d4d3bfacb999f5056ab87c39797dd83208d93","ssdeep":"1536:6Avp4lhumzhbbfhJmqRP5+Jnz8FtGzK4fs:bvp43BhbbfCVz87Gzfs","tlshash":"e0a308d97552b16287e371f440bf8406a23beb2964999050b25af0d0793decb03b7f79","size":103811,"data":"","first_seen":"2023-05-19T01:09:41Z","last_seen":"2026-05-10T22:33:55.896664Z","times_seen":366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8e81f93a4d9a01ea6df93f8a046a979","sha1":"1732697c937527a6271582c31cb0b109e1ad92b4","sha256":"e2caeea6c1f96da2b4b2688d4f33b0f400bc0d985c97dcc15ec28b839f60360d","sha512":"0d56e5690f037b7a5eb55fd7ef5a400d03cebc4653a25716fdcea8459b9fc1553f423937c79b2113c509086b5a27e80fe0d688bc922538dbc6693928208fe9f9","ssdeep":"768:722DWbbDTu/8L8CDpniJiF3NWoLLrLKKgwL:7zDWdgCDpGiF3NWYH2KgK","tlshash":"53b2e78b76c6b12967337478d42b64c6f56a7f813e089dc8e258ade4e87074c94b6c3c","size":25443,"data":"","first_seen":"2026-04-30T09:51:08.82271Z","last_seen":"2026-04-30T10:35:06.598305Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0dc560c0eaff1e76311c9633af951fa2","sha1":"609c77fc788f44ac8562d10bb05c603bff05bd8a","sha256":"9e95270a28d94cc417f0c355db89e27085485f625dfefbb7388259d2a553713f","sha512":"2f8d3eb3985f725d60c15001f95fb7ff91f5618370cf6143ac5b38b29d995a1112a1d4047134388fbf8900bc70240a47977951dfd7b235f1103ee04a36c11fb4","ssdeep":"","tlshash":"cb1164aa2de38430a477b0ab2b3fe304352761132011d9043d9cc6889f20aeb8e65ed8","size":1031,"data":"","first_seen":"2026-04-30T10:35:06.653553Z","last_seen":"2026-04-30T10:42:40.69713Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.6.0/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"537245fb53f486cf07d01b2aff390c15","sha1":"28f590ec969f6b67ae7fdf76db3b0271b5b77b49","sha256":"d3ed6cb466bd654fe36c57faacb1c88ad4e2793087431d6ffc5366961a4c978f","sha512":"d5d6a51c3906f44b5c3a60a7a028e2c10fc7101e520cdab0f1de06d8c2a83708e2c0c35e04092e76c04299294c9d776c1fc066d2639dded97fea72f9cb46cc69","ssdeep":"768:aPphBEP/XAr2G0+9O30pGSKN/PYvbzuhUO/5eWvckjTC/ESCOs964qzA2RMKCqhp:ahhOP4jOZ7CXTOxMwCIIM9Yp","tlshash":"8a53f9cd3292f427029751a0447f0a4bb337a958640f0918f269e5dd7d3c9aa42bff7a","size":62360,"data":"","first_seen":"2023-03-07T13:55:38Z","last_seen":"2026-05-11T14:37:03.737803Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0529ef0bf2024d7f843875d3a311177","sha1":"2c03c296ed931c1680d22d8935191bf9bec46613","sha256":"a9370323cb9316027f6ab288aa83dd99a0f339e81f0738b75271d85032989ef1","sha512":"26092f3cce2f83729e3912b381042d60b4d1cf30bebfb45d71f9b175737f0036d3945684b2b3cd9309dd12f7e70fc98ae98fbe8ae8e9b5220bd8906fc08ef66f","ssdeep":"","tlshash":"0ad023955875c9309195024670bef3983770605077616344c1dcdc7f6f21de368b165c","size":217,"data":"","first_seen":"2026-04-30T10:35:06.654481Z","last_seen":"2026-04-30T10:35:06.654481Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/vendor/jquery.min.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-11T15:57:43.336701Z","times_seen":154145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6de497026e9c4ed12136fce81df248c1","sha1":"2534eb504942d6fb7049754ccbe79f514114a28c","sha256":"ea7bf0c69f336cad65231b08bccfb152e3497f40917498a164b2132c980ff6e7","sha512":"fe36f154ae3aab7134aa508b0e9f6cd199febf9aa619b9fbaf51932729933c06b1179fd1b1118845ce70fa5b11c0faf206981bd12aaf8b1a1a0b36cf3305960c","ssdeep":"","tlshash":"f1f02e4ca09f909b0153f038adbac211b32b5007812cdd7b7d2d0155efa05dc56e3af6","size":651,"data":"","first_seen":"2026-04-30T10:35:06.655583Z","last_seen":"2026-04-30T10:42:40.697754Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VM43RWN4E8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b00003ef8b9986a284616e4e1d024a78","sha1":"024872cd0457b6562d7ca6f7ea944386e398b87e","sha256":"3b04242b2e625cff3e61a70e63ae40c9e7b8e75c432ef3f35a41fcfe7d859a72","sha512":"7321762789685567c531ac71fb0fe6723587a3798a17d63059be83d8a0852a4e7353919379d3ba6c533af176c6adaff6b4fc0a84fc0730560f68d2f668abda0c","ssdeep":"6144:7EjJ7mx/Em6PBBlXdoR5dLU7dG7BPKo7NFU1e34rRw:U7s6PBHCR5dzmw","tlshash":"72a4f9ceb3d674625396f478903f01cba57b28a2b448c89af189cce42d7469a4177f7c","size":471895,"data":"","first_seen":"2026-04-30T10:35:06.63155Z","last_seen":"2026-04-30T10:42:40.643934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/js/backtotop.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"330b018d04781d1ff2dbfefc086c827d","sha1":"0a5dcd2e5fc9d9e0006e6606b684921ed32f59f3","sha256":"8d72c00546e10b72173c8f8239b62cb988edbdc4cbcfb4413ab1a162e1d33de3","sha512":"6d97fa73ba8314bb7e40030aa31f51741e0e0289c4ee1ab71d95180fb6b87a52ea109d7fa9e6b362731cd4551045ad1784a9963b55eb3888973f22d3ba9e4b94","ssdeep":"","tlshash":"a52168b4a245223206cf56966776b3d83734606ba3537a827c4e83c15f51fb88824bde","size":1296,"data":"","first_seen":"2026-04-30T10:35:06.629825Z","last_seen":"2026-04-30T10:42:40.6423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b534b12049fb3b3c7d38c7149edce1bc","sha1":"17e6c28478633d92168ca19bda313078e7aa3d9a","sha256":"3382d8e1f40cf8875757fc9f0866e7a97adf042d43d8e35866242ed96dcefdbd","sha512":"2adb4311ebd14f7c899c63f3ce667180b521c070aaa6f85498159e145f047b85099224b3066e3b49aeb69f3d7f8fe66be576eee67f582980dab453e1da8d255d","ssdeep":"","tlshash":"5031b12bb7fb5d2246373068816f91056dab79539107eb083b1c23c01fc59666015e9c","size":1601,"data":"","first_seen":"2026-04-30T10:35:06.657061Z","last_seen":"2026-04-30T10:42:40.699118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/plugins/datatables/datatables.bundle.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"625d44c0248188b9fc51d60b827f51ca","sha1":"c4a88ba5768397912c29256de41ce11ec5083256","sha256":"ebb8c9748a3617c1b2f1e70198dbef4666d200085a3fad1fa588ca10b201d3c8","sha512":"5874e5b75a2aea86550cd7c7fdbf76c6718eabaf4a3052d1cbe8c6187152f31affda9bbbd6745b4b3b02cb114fd11f7f84e4178a730865ff159ccbaed16d8384","ssdeep":"1536:cf58ksPrWo6RyMnHgkI7AmQgJQuh2o7ZLIDr0RoPKQW+gCeupX1GkTJSBj:k5gORjHgkIRHJao7Z82QDpFGkT2j","tlshash":"01c32ad87b8475a883bb70e0006f550ff13b2956d84cc414b22ad4ea2dbae4951bbf7d","size":121566,"data":"","first_seen":"2026-04-30T10:35:06.63063Z","last_seen":"2026-04-30T10:42:40.640613Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-05-11T14:33:20.539966Z","times_seen":24771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-05-11T15:58:48.892004Z","times_seen":54959,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.6.0/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d9ad783c6b71f231b35a7a67bb5e3cb","sha1":"683efd2d286f21e2ecf6316ea21bda6a048f9afc","sha256":"937e40ef42d7e8aa3e1c4c7506fd9a02196db49ba8c776fdaca2fde09718540d","sha512":"41c626d6aed16e75e6c18ec72741fbf77f084b431a9533d8a86505d1f230420123301b76b6a8c306df91e48fa9a5dc04a218cc7479c55341fe4719ab190f2a72","ssdeep":"384:5C8gU+iKBsUqGn3gq5oKLQBhv6duXAM2K3Q8Icre5bfQ+laLoLRQJd:8wpG3zyKstAE3QmrUbf1laLT","tlshash":"a792f8cd3345b42367ef6276d06f110ab23a14992d1e01a4f224a4e07d796bc963ff9d","size":20526,"data":"","first_seen":"2023-03-07T13:55:38Z","last_seen":"2026-05-11T03:53:41.149025Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"833c1a9b65199103471bc504ca42ddd6","sha1":"e90fd42462d179c58dec6d68581fa5b12fda9487","sha256":"6408504512cd63f7d9100854407e046a83d56c12f2167bb3c8ab877a6c750a72","sha512":"f66aee7823418453eed8ad0f454775bd2a7935fbf90a290271a92ac5cd10236d643a1b6ce7b910b8e014255043aea403065470e9088bf0ed8c0c91f32a8546bb","ssdeep":"","tlshash":"00312d9a98f79219eb3f210e173fd48c2d5e26076c44cf18bf8cc6414fc47a558a66e0","size":1611,"data":"","first_seen":"2026-04-30T10:35:06.658017Z","last_seen":"2026-04-30T10:42:40.699963Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c878a89ace4d8cb71411d17465e2b6e3","sha1":"4d6587f0f99694c91226123a72170e05fe69e3ec","sha256":"9777e57122ed4d13a32322ae151cad813332b120af875f22bc706a3b2e483051","sha512":"b7f9f06362ce6336fdf86b249e1690d648cbb8977c3004cb410664ef175188eb7eb66892f25adfc24b980639ab41f66450064d651e4df3d6487be36718665ec5","ssdeep":"192:yld2mBBf9+pzFG3HmX6yj6w1qAU6apWFIBCpalIED+yoT3rLR/n7UCHHmC8v+lEh:ylc6yjxqQTUlbU/LDDHqvk9nS","tlshash":"95d2504969f700720a37b0bd5befa0057a2610078d08ef15bd9e63c05f9962ca5f6bdd","size":30018,"data":"","first_seen":"2026-04-30T10:35:06.658891Z","last_seen":"2026-04-30T10:42:40.70064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5d5fd6f139a60fc707fbb1fa05de5012","sha1":"72444edfe4898e95e86e7fdb3fab40b79dfef6f4","sha256":"53b89067cee25260bdcfd31dbf05c74f3e3e58eb31d62440c4a94a41186a52c3","sha512":"8a7d8a1250794b39bb57bbf9c435bfb3035b5e46be51fe93200c0ce86087485a0ee286d219268302767d025a022c4418c8a9928f23140cf8340b94bc549c3c0d","ssdeep":"","tlshash":"c0216dae98b611a684bb306e76bbca447e7504431142ee02b89c89c01fd4d5cc667ecd","size":1260,"data":"","first_seen":"2026-04-30T10:35:06.65997Z","last_seen":"2026-04-30T10:42:40.706334Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc1433e6f05a230dcc708023a767d0a2","sha1":"47e099f8e0f23ab7d32c1de18456ce8025a7fcfd","sha256":"08c04d0a118abcc4135d4c87169ae20acd5e417e0a06c505d6789bc6d08fdd9c","sha512":"5392547e66554b277e3d9bb5c37521607e0e0ece3ea054f6a489f8e118c4e119fe68757513806ad34880db40840968ebbc3995d3f631e519262fc5843141b163","ssdeep":"","tlshash":"ac71e150b1f92a7a113760e64bbf44482d9e149b8145ef0d797e56cc0fc12da3b7146f","size":3713,"data":"","first_seen":"2026-04-30T10:35:06.660949Z","last_seen":"2026-04-30T10:42:40.707362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/lfuy/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d971d0842eb490e104d7adb5b8c56390","sha1":"ac22f9a379a16efffd060eefa586b2c6b6515dfc","sha256":"f72365a670a5ef8fcb62fce1bbcff312357b84fa423a607fcb85197d26bb5137","sha512":"0afb866e9bc68841e05e13ab82bc1ddf1b84d2540617db3f895fe01491d6635f02c35fa2374de9fd139025aa672d72f2755049233f6d69e81b18c1b02cec0736","ssdeep":"6144:7Ea/jJ7mx/Em6PCBlXdRR/dLU7dG7BPKo7NFU1e34rRw:37s6PCHrR/dzmw","tlshash":"fab4f8ceb3d674625396f478503f018ba57b29a2b44cc89af189cce02e7459a4277f7c","size":499821,"data":"","first_seen":"2026-04-30T10:35:06.612137Z","last_seen":"2026-04-30T10:35:06.612137Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VM43RWN4E8\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","size":216,"data":"","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-05-11T16:04:38.228244Z","times_seen":17447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e48830de1ce17623e02f7ab609a135cb","sha1":"b7602913ccd268fcdbe36bf4815cebab83dd6fcf","sha256":"189e1fb7a3ccf1b67441eb184a5162afbe6c58a1dd562f1cfeeecba339cdde9b","sha512":"fa1c04b917bdc7c93b49d247e8afce358e4b5cc2a65f738149466ad0b83197744d28d137fe76ff28e5c0a489dc702410ffd68a21b99ec992ab0125b1092655f3","ssdeep":"96:dGdPfBMhG7iq1diPCnh4cvC/SVbzeJdUCve:wRMhGvVhNv2SBjCve","tlshash":"cad1332064f6247b03b3409a7abbba497aa95c5b90085b06bf5d8fc84fc0c55a4dfb4d","size":6757,"data":"","first_seen":"2026-04-30T10:35:06.661985Z","last_seen":"2026-04-30T10:42:40.708487Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-05-11T16:03:21.993975Z","times_seen":149280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.26.24","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","size":79991,"data":"","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-05-11T15:10:19.43449Z","times_seen":2269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2e834861267b89e25b9c6554690a45e","sha1":"a5c70b15fee95896fa7613cc8e1b4c1e3cece5b4","sha256":"26d8cf441b8aea1cb01c510c2ef4d6cfc3bc75089201d6e9ec078e8fef4b0665","sha512":"512ef92720eed7720116604f0c56d4e6a37171c433847500117fc1552ee6d7f74098ab21a7a3795c3c8bd484ecb93e55258bc625acebe6155f064dd5f9be5e0a","ssdeep":"384:lmr2Z/qnjbP0njdPKk87cTOGPmQrABnhE6klWU42LZtbnTWP+rKa5pglG+zkh:l1th87oI7leL/WrR8","tlshash":"66232f1c66f76196807370bdabff8614393590073649de513d4ccac06f85f28e5eaba8","size":47142,"data":"","first_seen":"2026-04-30T10:35:06.662906Z","last_seen":"2026-04-30T10:42:40.709291Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/custom.v2.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5f653fe0ca02222b724546457503323","sha1":"c603163ff0ab229dfcc5c178b62f305307bb9be1","sha256":"8ed5fae513f60c62cdbd53b465577f4b58204322678fce7b4b9ce78fe21553bf","sha512":"6186bc277c1e5f9d6d2a27c9b4261bf255ea02b14f0ef74aab6a283f118422bc82123bcc6618dca8c13b4f1e5f745bf3560a1425f7d68cc366713aeffbca04c8","ssdeep":"192:x2A6Df/G9xs2QK2Qz8an6s0lMw4bah0vGkISsC7sACEhARb9VS0SnAFYaJ/d:4bs8a0lSl5+SfO","tlshash":"c122200ba2f324b6842ba2bd5b6f7329313a51071086dd757f5d83d00f9a87417b2b99","size":10211,"data":"","first_seen":"2026-04-30T10:35:06.59573Z","last_seen":"2026-04-30T10:42:40.619751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","size":73163,"data":"","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-05-11T13:02:55.131714Z","times_seen":6960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"813b8b013e4b0728af103c5ebaf9911f","sha1":"adcd0b23e0abb549f66ea40ad32d0c5626e66477","sha256":"7602ab9995a5d76f332540c34adc48455e1c9e80603b2ea555ee9b696116bd0f","sha512":"6a258df3c4f3438053fe38dec10472b9829950384f41cbbae316418140c131789a746d8179b0b8184672afb9abb6989833e8a44ad6e4bc0570bccb62163b3f84","ssdeep":"","tlshash":"9a31dd1a29f540e6077664fd5f5b98013d3110478629fe503e5c6be82ff627dcaa27c2","size":1506,"data":"","first_seen":"2026-04-30T10:35:06.663868Z","last_seen":"2026-04-30T10:42:40.710125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66234094a70fb9799c4a3d1fc89f3152","sha1":"867ac5230240eb1f6bbf7e18d48320845dc27970","sha256":"17ac53eeb1594f03cd70c85ff5651206351d678af1821fbf9f6828d0921c3634","sha512":"75ed164244bc810c00d45583302bef390335937e64686fc997d934b94dd535ccd39c65f925fba4cfe81999ad482587bb485546c159066707124b57d3cf255ccb","ssdeep":"96:fXncXog5yyLP+jCzBzlxpUT/hHHxv6VjHeeeg1yIQOP+jKq1syzbAzVTyMbsBCqJ:fXncYgy1jCOxv6VKeeg1yNjKupHApeMW","tlshash":"96c1a92938bb243886b761be4b9f270972364323601dd9683d1d13685f90e764b93edf","size":5709,"data":"","first_seen":"2026-04-30T10:35:06.664806Z","last_seen":"2026-04-30T10:35:06.664806Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f6ae044f74ef73e071b8a694d9a52f41","sha1":"e2cbe93ec15ed38779f905053486c1203ed76515","sha256":"b879aeb0e297cfacb03497605c2da3168dca218e9adf96f6a2507c2774ceb804","sha512":"1b03e55d2a508ce4a9a5911854186f70fd3bb7609298767fb2ecc7f2bb7b4fa0e84774cd78c6a9f791cbb3b8738ed0714663a6705657f1f184191918e4693379","ssdeep":"","tlshash":"1151cb2963e25a24533736294bdf12a83834a00bb046ce2e7e9d87504fc191549baadf","size":3018,"data":"","first_seen":"2026-04-30T10:35:06.665799Z","last_seen":"2026-04-30T10:42:40.713923Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41b9d442a436c3cc359ce9bb6cf2717d","sha1":"772ff5549d5fa5c0008b58e3c5879848bc62df24","sha256":"150c1dbb331cc0409675f6e9b657a9d1858e252bfb0caec827ee3208cfec37fa","sha512":"0b7fbb4a579ae5391f0acfdcda34ffd43b99c23431a026898c1dc8fd160ebafbc1b985c3787ea432b570cea6fa264035261e26be049f53a60736b02df768420b","ssdeep":"","tlshash":"f3415aabb5f32535417b3769165ff3983921708754909a3e3f4c83c50f98d640be0e85","size":2305,"data":"","first_seen":"2026-04-30T10:35:06.666649Z","last_seen":"2026-04-30T10:42:40.718454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e3e31c36ba61fc66e9ea13b132bf340","sha1":"af80574081a1ec976ef7281c55c3f5d25a78ff55","sha256":"51b2e3950b3d7ad475bc04d441a3cc6bf6a868d5cda3ba6f1066ac03dc6520da","sha512":"b3c137998a33c5fa28f5ed91bc9fe4d78f150a4472b43b1aaf810d3f270ed033383ff117f5cf7556e48d276aadb9cd86569743b96c7a7d0fccebead98534b19a","ssdeep":"384:CndrnQLiRsuLTXlEh0MyogVEIG8RWgvZ7MFXwU2fCypNZlB7S+iaK1RF4j81Lsb+:IrnQqLlEhryMwU2fCyJwfX","tlshash":"b013226084fa3032807360bab3db1b6a29365d67e445cf453bacd7c41f87c14a5eae5e","size":43503,"data":"","first_seen":"2026-04-30T10:35:06.667665Z","last_seen":"2026-04-30T10:42:40.719451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"09f81149c381cbe03ca2573a7990653f","sha1":"a5625e786a79e011532d26d9f4b42be1c0ba8590","sha256":"1b8586cebcdcc8e57120503a0d0198094ff1ae5084615d20f74cbbb1bd3bce63","sha512":"cf6a5fecc953e4545721ee7ec55e8676a3cd59314626a45033c1c9200bf20723d9d640ed186179ff9aefd31edadacdba49fedd4252cdf95ac803b1f301684b96","ssdeep":"","tlshash":"021100753a2a5534c5c5818b317ef7a83e3260217a02a184c26cdc385d18e9724efdbe","size":902,"data":"","first_seen":"2026-04-30T10:35:06.668557Z","last_seen":"2026-04-30T10:35:06.668557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"img.ogaudit.com/coins/tron.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/tron.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 5394\r\naccept-ranges: bytes\r\netag: \"1770e9914bbde14f7be0762dd03f06c8\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:00 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhLkixC1krMi7vOdUGZ8PdHRt1ZbPxF43BO089ib96VBebHKH6Y9acuQJGjRsyDk%2FfqXmExXsj8xCZKePpRD16WYhoWdsrbHKWm2%2BV79EHIWnPhVdiKu1E2FyxI52KS2LYo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98156b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 250, 8-bit colormap, non-interlaced","md5":"1770e9914bbde14f7be0762dd03f06c8","sha1":"497d8168f869646e1affca14aec24a89649fc0d7","sha256":"6427cd56ba07ebcc8e42dc1cd23cdaa43dec90ff469c79e72a68fd8cbe3784af","sha512":"18badb8d9eaadd98b3e338c682a3ef61fbdc370e5294f7991398a3182fe83cc6edadeedaf00df6962b5394cb2aa2309f04794e5d3feb2f4e0726f00d9767686c","ssdeep":"96:Mit2UCrrXObGyH+mJZtLWLm54EEQD7tvD96+FLkH6EerNkjv8H3n29g++:Ft2XrrebGyemJZtmm52+t796YLkerNkG","tlshash":"8cb16c46ede4c29042c623212aba5a7c59ce7a45555cceba8cc4840f44ce116b8a4e93","first_seen":"2026-04-30T10:35:06.586737Z","last_seen":"2026-04-30T10:42:40.641785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/solana.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/solana.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6163\r\naccept-ranges: bytes\r\netag: \"0f85cda93631518b55ce6b258faa41f2\"\r\nlast-modified: Wed, 13 Aug 2025 15:52:45 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRGnZFmswrRGaplkHsSHpg%2FZDlFbam3brsKcODp59VnxsOh5X7qgFGS7dS6FU1EWeY83OsHwanDrirngUX5oUUxnnYqeaUSvQyWbW4cKDN2OqTaYKZmU87oc78vZ9N54lQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97f56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6163,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"0f85cda93631518b55ce6b258faa41f2","sha1":"336b1554ec50020eaab41728a26e3e29d8c474e2","sha256":"b21adb8565a7ee7b5f9d0123baa49e993484e12432e13d7c33d769a39dc5d3a2","sha512":"f041b0254f5d4389cf2b64f9080bb10d18b6ee142136c699bfc858527c7bc1b0aa9443a3cc2b113f872bf8debd3b5fc5a37303ea3f43560181e45fa6c4c65cd6","ssdeep":"96:yDqlbdx53v5JFC2Xtltp7jzf6uX1O8Sg3OdWUBProORENpfYopezQfhcJu:sax53hLfdlt56uXw1R9GORE0op1fhcg","tlshash":"41d1ae41da342c2d7fb80b254676060685a4407567d2d3034e80dad1cae0b599fbba07","first_seen":"2026-04-30T10:35:06.587724Z","last_seen":"2026-04-30T10:42:40.633661Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.26.24","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11.26.24 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.24\r\nx-jsd-version-type: version\r\netag: W/\"13877-yvQx6m3IVnvgENB/T31XmBY4Id4\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 709867\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\nx-served-by: cache-fra-eddf8230055-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49001)","md5":"e8f033d3c7a50e4abe3d98ac65234d13","sha1":"caf431ea6dc8567be010d07f4f7d5798163821de","sha256":"7506c8f4d85e4707ab46f9858f0c6e65e3316b9d2f122dcf485b9dbf39d5a7ac","sha512":"ecad9d89ce602e5121c97135933a33122f0d9b32c15b43949d5fbe51fe576da069e9a416772117eb4666d8354b685046c0d7a3e086f669fffa488e2f05ff0ba3","ssdeep":"1536:iw46xylPIZSKcO355lcVU/SZ2DUdzI8bRj:PxYIvTlcVU/62mI8d","tlshash":"e173f8916a00f03776bb45ae65d1e7047ae99405fcb34894f42cc8804fe7d4f26b7aba","first_seen":"2026-03-20T09:57:21.567576Z","last_seen":"2026-05-11T15:10:19.43449Z","times_seen":2269,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.5821227945117885:1777541025:o_zoiwYh9j5Vokv7fOGqvAqCtw6ez_yOLXJJf8Lhq-4/9f45e5038e17712e","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:35.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/0b8fb825cb67/0.5821227945117885:1777541025:o_zoiwYh9j5Vokv7fOGqvAqCtw6ez_yOLXJJf8Lhq-4/9f45e5038e17712e HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12132\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ogaudit.com/\r\nCookie: _ga_VM43RWN4E8=GS2.1.s1777545274$o1$g0$t1777545274$j60$l0$h0$dujeiSsQlqKWFQdHtqr8Ng0_OmgqF68Nd6A; _ga=GA1.1.438024080.1777545275\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12132,"data":"QWm6aRoXfMvs+8wAsfoMY5oC1osAyAFlfAmwoPAc6iURtIWIoBA3RQR1AWfy5AJRF6vjA5BDoq762Kwj2A2WWi2AfJt1AoR6oYhMMwokMKqw6zqtsmmo3asnMVk866AlghNh6qJow6gtDWAoCVsu9f61vbuaDRhRAxN6HAVRHIw5ltMX20fX2eAvafuvVx4wDAig1X29leDEel4RrwAaw5A8WAIzTyAMnQq756$LZco7ZHJXG0uuWWAamIAoUvfhjaOcjMAK1YbUL5wr6AfgtVwmm6Aa9wZQC6bsmA$l0RDsEXO+mWAHCIw8DifJlQsqlDXMCAimWw1Y7t6Avf3HwXtoI7bI7VImAXz5A79wRmAH5gDjBtmRfmAnlqXhqqg84p3bpZmYR+5Fj9ZHyksJfH4Lm5F9Yg57X11ooX9lKeEAofLM8oj2pjDmmp3QpxmJF2J$7p7GU1seBmAWRi1AoVXh$1yoNPHIIypABg8Hn5OuPcNlecVj357XV5VIWSyMUVscIAM1RxhbHOs2uQQ0AfoYC4JOF0gnqIMQBmtIjLFpFAvJZSqM+hOOrwv$qqciJv4IbkhRF$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$hsqvi78qVNXfLvzF5B1dMQSFIKY1ZAmU5H8wfEMCMmm6mjoIf1wRsj8hKNKvfQmbqTMV2M5MD0iqoXKs4yM8PoAIKf2gRHD$DWfFJ7dmfl75SF1ZXo1oo62fuH+bwJfew3Sfey16Q6j5J7fP2EQ211ZYDraGqJQZWIHH+Aqb+mFKnUwysWfwt71dM90xPAbhCbApOuJZ40gKiho6Ks3F4PAofK28IkiARR6y7pBtK8Jbg198i2KNU4RyAFsaYE8WE62KcZ0BnhffamwoKilvGwKi8vxa9qAVHO9ZVQRd3IirmvlEUo6VMvxR1Is$s67kNgHQ6xsHmDAqYWaBAOuCxRF7C9GcUG$4P07vEMPHMdwMvufyKC$DakhX6Cssec$qzec59ie+O90+gbl1ZFLx9d$KcFh568OUkhbNEdnxoQdbfwv+CVdk+Vj9eKukuldMAAvNSwfqmCNWCv$WVA65CMApwIfAMdCd7BQMEkiP1hrEDeYH8w2AHSN1Df+86mmF6GjmoqgxfyKNiDzYVfa8$lljmpEawAv5zvfowRwhCX6yR5fQY6jg2oVvM2M81kTeXnptqMAm7n9QSiQGFgSygcflWjHHQRH6elsvp0ITFXOn1fARv6N+m0mg3wVffuFKXqZaAxHW8LtWElK6KZe8w9RPUgozjovla0$RR9XDso134dqJOo7sufHDkgbqkKbMW8BjoCODRRE6P2XORF2BOhffgE5P99GONIhCsgPvJQOOA1p4OOolmC$ZQgpp46syEYrPHjOWR87iMm2wwoqee0nhHFmjoqCORC7Lf66Ow150krH1mXOHl6AWMvmVdlCV07bHO2bjLEmHvI7ZIDUtnTMHHAJJbYEEwzyDMXODatZechsu8XnlL4gWvbHrJtnbMlXf4KsY2TbCD+0Tv+IAfmy0mRCfR7Cz3gAdvylLipAopw1XgWn8alMlTi9FbVoAzIwJzhI6pGjapXbD2b7puARP1H1VYne8jXmTF88fe8I8Q7IjehOxT20MMkXV$QpIVAtvS4Hv5goGtmMEO4EOPrJfoJZmIXCi5AfsYrltUlLyJtFavfpPp7H8awCh7Q41Gmi1FYidaRtEvV1ivWTnwIXf3QQWC56mI0ildaSVy0taZT6oAGqwR+FDxpGahCSF9uCAQvO7JVKZMrvUekg55f$6bzmI96TUOo59T8X+Fnv3Pwf73q0DZtjfLa1U0kaotro$lhlOTzL6AczmsLimlr10yE65ZQQgfbP5PNjYxLsAnzpVHXQp0k609Q4sSmwngoAnJObR5L$w9EAMlbGQ8A9A+Bw2MdQLLEhd2toEOJWIBHfo$Ff+PmANqlvEPAm1obVAJ0UsVxpMSgvMubPDVbhFAPinB4PZZssW1nioJ4gHLkafX1s8yuYQXnvfDtqsqb12alLKiz7Fld$ABIG2sm4w8ApI3zDazxbwACbeBcsmwcjoFBDpM8wH6sLrVjmmQzdlSHDfr8egFXQuvxKxfohzIqnMnnOseEZqqksBJtnoL56ARYvKJwe1Ab2gaDnj6i51SadEF4n+m6hco4XCy8I+tZ1CmKbqvppXk8aDZEvDNMf7vAefo9iD5B$a1O8Dvb$Qcly3ejWhz6RTS3Qkm8A6wtY3AuL5O1bd3brY9g8BqqLLdGxHM6C06WVz7wAt5R3vILofM7autcDdDoSAp$oEMmJen9jP5Fkjx+0JyE8jakyQLMjGMMRkRuADQoo9yF1MKgBk19VJAHebCkAfqujbeLonhn42u8CexllJ+aWOun45wpFAcMUtWsSj1pDglRvIoDdDehtz8aZUglVB3+e8bwfhwXkTw$gsymmJ64rawAqHK+ADQy3Vzo582gk0O+gK8WOR8Uu55L92dyVgksnU1mgWCmKVQ6qf54gCcxwnTDvA05oHt6jASUhjX9XYV4ynA7jfendkX7SMpQnN5GKBjUMnvduvw1bZLovmvgJGMHFjMwsJGHOqYgcYUJGw0KCjoRlva9Jw8qgKG9lMl$Vj5M27CbCEs2q$Si65qaPybSp2EQWZ34mm127L5NMNcFVsJcnaV5221fgVD6s95sLVFiQWRG2OjoInnvpFZMLayJZcbvo02hTdH0O$JVKjLaZ818c$St7IJMfl01cMiTJEU1aO4LFxVP+o7Qr3D6lX6obGmLFWIyqk94M8XtLKcoVKDL53Q7QKgVNkeQSERrl7zxt$hnDGla$ZPHA7sUQQD3ozBr4CUpaxd6VHSoVUKablxZ+U12RngsojY9lP0Fp7OLzWzzX2y7usopSuyqJKDg8jmZw8911DQ7nTCMM$sAnogFqCR8UxUOmA1ybGV4xMy$Oz+ZRbxQ4smOB$eXVl6E+KOwMZi8AaHZ4ZsQeDz$O26aH9ekAks3ndiaw3yRV+xrPuim4lOPWZVsB2ARMs6JAWmHV15OeOPUyu13y2XkD9DjP4P8oUOqyrmHPDocICBuymZ8iLis5WDmZUXhRr1PspyI+mPr1$Dqxc5aZgRWf5o1xsmk6FArjWTT4$iimMnXn9fUAeiWRazkI$zRDoA3sH176WmI47M84znRiX6uAKM15roWeXV4PyoAgMsHo$4Yo+ofVbRCBIxzga1PbIDz5cyxgrZUeV4Ty8MOmr4sRWIMjXO65lsZ4zw8ThHpCZ4Zm1bKAi5vV3x3MYxyjWe7TzIpOfjXnKe0R$MfmZz++m4LO5xFzrg8Bw4bo1i8gJob+oAfgsmRVgOsw5tf4w4YtKB+0UnFHT13MKA4Am0VbRtVVgPawrgGgKTNgmA$fZCORZPInLmLtmz3gGIPW9DEPs57fGn$DnBW0N+jzFsasrA9xh45TrxxbSibZaRIiIDZx8Vsxp5ImqAsy3MyyC4XOXCciQ0Weu1R6vjBoByQAeyK4kHievzn0a1gyH2yPDT8Xdfl6vxyIfXnzDyImcsmBvVRDt6XO1iOoWxy514$2NbrfHmryvVsex1nAu0Sxx6A2MBc52Arg65D5mBm4sx$M0DvAX64MKBm4znrHc58M00znqbMm00gOp4T+ApbBtOV+H6CoGHWoMsujL56pmpoAJAU+S0djIm0tw6HC1iKfNyA6KfhfGM9yHpv5xti6dDCs1ylV1CeXKAvA$D$Oqf1iAnBWzItorwpTHVZPVxKABxkHCBInI2G2XOHCA16oMm147fjWj54AHjt6DZ66$fJDRB1J2ANt048ASVAmuX8M84gOKfqD8A4Va0CZkpl2ZBHJw0AinJfpZPG1KAQA4J3B7iCgApPe3XpPdD55gB9D2B6mI4$MDMAJwAxXb6E+$JeevgIbMxp2WIHUkIZ4inKAi4aiu1efMmeBIJPbZ1Ljcx5IrJRTi2f2x1KDz555cU5idPjgTV+tybcyxjh4nJS4QP1RabGDCBTim6$JWp68PoMmm0wo+mSyx6V2lfdD4AGxsTU1bocoxPA8TtB4mo68LmaAeWaHktA8qxkx3855utKsUb8Jwj3JV+YJZjfUpC2Mx6UeIntZ86FHpCBVrfpg3tLsEZZZTUI8Y4Z8j0zbPVE+Fnaj40u1Xl3AGAo6opTbv2++mjHZFMw2wgzsaZWxr5WINtilXD3XWgd5Igos3XZUtimAHClAuM9l1ojnFAkxXl1jUOM0QAXUP2UO0x9zVMZb8xcXR+clboNtnJyRXmPX1V00lyAZeJ5bloTbfJvVmPfmQIhAqIB4L5RjG1qDOD26L4aVgi$nFxd6Zg7JsjKItlFZ1i+yrTSjR+Le9L$V3RGIdxNlob41EPjAX4sfelsmAxZ2iR26o07gIm8+z5sT8gyOvVulPTYpWTzwtmN6KAqPb6noeTMsCB63hTHCODeXzPs560XOx1UAn8mjRUDTxsw1I+FncsMJmzey622zBABLp5Be02c+7Dx1ZOb54ArtyTCBV1Y1qAK8b5kLoiC5ayX178w2a1QxTp5LTbZlO0A8gO$JDPeLK2u8QMiHH1O2cl3XmxksPLcQXtiZdy$QPsxbpTpiNtbZdAdyDL$U23WmPsm0DWoxo6MQInHDrVXLzOFyMpm5GtUOXCt1nnF8IfwXUO0QClk2GIFLgPnMabAeC5wQA5B1GIw6+5kB9TkzoA2xVMhlrzn3ItFYrgjJxY8fNDwbN4wU6pl33XInjiPs$808InHLP08zZ4gBX6x6bUlQ10Wx6oZV3Am6HDXD$3x1lHV3G3pC2VFepCU2LXI+gpW8vVx1etv8QtnMkAZ0Tb0UzbvVmDmPwPoADgUJ4xwJw0l6I0FzFnkX$D537fqH7sUUf38VknziF2YoNtCBdOGXAyztx1PTDPLe8gbQMzBQIpz2+8ByFyH1MLQA9PtDzzIJZsz82p$eHRm+W2kY9Y$DiLwThXXnNx46XnqYSOpLFHtM1t8fbZbp84L4e+6zPJD4+LL1FZPzgIIBNYX1$CKCr2+2wiim+oLA5TYX9Zx6E+MtTVAxbtgg9p6o7M0YrDgt$plTb2086pSyXmFpTBsTvc3zZVFyc4oiz3wJ1iYETMRDuXd323QvhHXCfEp8Z4I2b6Lf15GlHCPXybND45vXLe7Dfby5$xI+p0Lect$X747tB28MSYZg26BiIqgsLAOgkLFysUQAMQAnp51nBsn2B5+jA8T4Z2m2I+r1r17DbVPs84vExMBf5Mi6AFRzEz68Im825mvVznK3X6Ii9Z$O00mPtmsO5wVqtcmAmEqHh4sqw6eX$MdbYgX10DsPtBrgqqqDimDn3YD2hRI+$J$0N11UwvjQPY8fgOxEQQCJEQgQqQkQbbpEg1o6t6RV8lhjwJmqXf3oULC3hBaxrTqeP4KThT4JlJWj1l5jeXH+CBRjbj0RJyzn1Qqe00xJ3Up5wkg606ol4phjj5vAX2v8gOLmx3A8U5i+8A8ZwDSgIcnMPs8gsfAi8g4EsqgJx1AVozneKJBt$M84KELengKHogY6JXkJcoUAFoAmBTofR6Hs6+6LV5dVaqHJrptELVjWGHkkYVr6DjA86g9mJcA5rAtgAYAikEXONxQ808fLYgVM65b555nqACR0Clmy7MP0nyxv5qLkb6QkHkwUVQ66HEl6NlX8KQgQDYnZeZX8SlLehE7E8MiaCButoiv8Rj5w6acy26+vJAbcRXtpEpppF83LraEEZP7av8FnlvpYdlnebXZXkFneHRv4u5o6CBFn2EYPCxy9Ubj9CY0PnllEAjclLnr1CBen+bRbD6mkbLFHP5ieYJEFB47Muy2nIoxpaQo4YobZaD$D9omqU17HFpVz0pnEXOpFa1DLlz$luEHJpttEZqUE9QppYUa1pPp5npGPkeatDkaTbTyk6lIjEJLmfzgbFJHJZl1vxQE$Gov4Y0acU40yw+8M$ctn3ZD62ql6rYRoJQD6w1yzvVOpLAa4NlTzImSTLju5FAPz7H3vrHFDrLjPdD2Yycfmeqz$$DhbwEE22EEabYUFFAF67JQ$vbADH1GI+mCQdTu6OYw$oi$g5FFlcx46YkyvjvKs4vE+mVSiGyRJZz86fDl6d384$voi4EqvzStndFiVrQR$eZwYXKJElXCUFYInDY66RJLjzI6iOTORdIz0wBdEAY7lQAabp$OgHCfzdIj20ncbLcR9Ek68pJmgNlJxFT4$RSRVSTJ684TioAHR9X+Dtqdoqippvpd00PSimqPb4rHXuURJawzPS1ZyLp+m00FaEqafoS3SBKy+0LUO5kh09s3YhqFFVLolCnWnTFTqfbJoMKpq8VREYpZYjjybRVuQ+$Fcl8SBLf6mCxX6zchFX1FihnTMB1LUQBp5xlOVCaMkm3$CVFl186ahQ28fzpFZgUaxO8wBDWN9X8gj0jC9jcFKn8+p3UuiB3MbXbETz$mkLmMJO6zxprwLb5Z45k1idaJiZ5jlsT2MtD7MIal8eEGDOOtEAEDnHLjVRlA8ALOr6auB1edTxFno7DoXX1dbtIClZqWlUe$J26dv3sbjdIVZJ9mtBWELXnJo6av8lYw16qC57qpVm614QSn$4tB1YSEc+iksznN91BFbi8UFQgYGyRaDJSx7cOmJVg3OtESVw63vTQZnlaVm9K7KhXp7Ur87ESmaim39$DkfYEi6ClfmFIVIIul4yEHGX1c3i6xghVKpm83q4xDW2EOGtjpUAybiIFoTBgMmRVg4hHfPBZH9dmVZ1O+mAc+4S8awnAkrLL4aJ3T1CBNJssOp+6np$j+zE+XCN6i6cMdIzckK0$VrGBBrD5LLRRortbje9u8ArgDe75+qRqz5bq6mtSRL$Duy1U8S1RPelUkJ9Jnek984$JxVp5siJ5SF5FBeHFm$wb9FI+6bDbney8D7L5QoIpNt0QKNuNcumATQADi9hrKx7rGOU8WeMhJgXCrgIdWTNpTob0x1uOd7qaRcrQ0QnJAVRuZiXGLOYreki6qtCg2LXORYKIQospw1iNGDgT8toq6UluUfw0Holt2pwK6JC0qR61hCou5mSo1bsl0A0oAhR6mfmBx6$CHpbcqW+GP+2EZufhp0y2vw26AYV8ReUfmkAL3$govOR$gEwsGFQJ71jm9FmMP8DJnVbB21z3nx5dH7vso4oIAWOL5KwAnrCkL24WWx5SqsAbqe+uC26KwmFHhJMszPq4$AvsoPvdCDAL0OD85rIK$AtArZaynqP6Div9jMM8n9Ht5K0tpoB1HJapoqabAYb0B71T7P5OyA2HzIjbv6om$RZ3oBDOBjXPgam8Fzmmvi7ZIHfEtiix6OPVOvf82CmgX6imJvy0fcowgCuHhAIa1Fo1wgWWjmOaIegDDb1Ysi7AUgov8vEBi1CCyfhHqMffi6ewRV5jnHvtB584tCytq46YAPgCm2C46iqtwf7wjAevffv2RKlygBD8185vAoqvbgCBQCTcA7SqgbgBeOwrfFi0kf$bIDw1KQtrnogbgivmfP6Dw99vgAjrOQHeOZiSfVgpDSbjX7abpvXge1YpAI2bPo6amNlMCEOF2Astt+FR$wQ+jEqNoGgBDtRmmPgU5Wb1hOKiHLAx6gvY6tMKJQfmM2ov2oJm4HX3G46PHPn37JbiR7IkCqjgogOhaRm1imq7Cu1T$CxliqHRHtPmke2qlxP2tEwm6aRpMv2AqoVHLG5CTfALg8fmCC8tj78oofMqZ5Zb15EsfeFjDiZA1EPVbmef7UPw5CBhmQrKAOqBMJD5kMqDgHOvxjk7LUif2Ug6vEg$Ph77JfpR$1wBWWQHLlvaa$2nt347AFkPaioJ1gB1TZ4Jk2A6Rf42Ds1jPk2fifwwhCnDtfiFtVRy68CDMQlf4PgqD0aCrp8YGztpfqb8A2wPkqIPavSmZgMAiVQvKFfM0QIhKvViRJlf+0uMHzCyMhW6g+5jWhejjHWvLqwtIDoDyCFDv6glANHiC4Za0FyWqgG1cCOIQ9WWoRzHwb0gRZvAJ1m44PMwOfMeiYqYZwCsD8OR7aT3ytYwq67y2rH16dtrTyMg0o$P$q0DIDJnazQ$8Ig3DYgmJ73fiKx0b+twSwjroN2D60g4kM2q68kKztBmY1dEKUf6J8vRMqTM5wCACvMArCsqtb7e0ofAF62KAOP9lF4Ax20DeX1FlMmSODFNgi62oIPbXo$Rq0ZbFfEhoov3tXnyXFwpbgFoAgrDm6KAaDoMAYRZ4brmbK2GfHVAs+ey8P27obODwVmm1ODiq6f0sFFCbM83vpAGifox2BAhO7WvHI6ovRjLm0j5gIlTc4Wr75Gq$fPFDgyfJFoRzbrLJIsJtM6QrVSgMAuANOjAmdC4Fp68+T6bSPs9sGR6sFJXDBHKnwvN0NolAXnjVj$F0wxAvMtV1PiUrsg4RXfLA3AsfKDC5my2+24D4lA2wfob6YHIDAAfl46$mv6NwflWGCq5uAPZ$yIIFB3wffqH17DgyWP5ewcb1z7mjbAj2$HN6rXPFr+lKmcoQbjHi6aZH0IGBfW0n$1O0TM8UXrfTD$sKGwQs+yjD5Ca5DooOAcoVIaNHCv02xfW1Mdf3RwjBoJUVAd5zRL$hKAtO40mDpQagZvoh5mzNGaCJ1o7m4qSiJm8VPHv8PD6nWTwDMP37NwAOkAnZsIiOq8H4w7mwC0WfahygK+b1vM7Avkv883q2ISZdLfkBwFuF9ivaaC1fvgvKLT0feahRfK+Reqip9ZWqPiaoA1gB0WWtbMwR1W$qwtvANb7ZR2l8fc0b6jXTciXq2ciJJmHVwRKpIp6CDPITInE3Vvo1sjS6MD2Z8tbtWntN6GAV1v$PDE2Wmmh6PYfHviqADmDt5tMviA4q$AYFfZ81Kzv7obIWi$eXE85Ap6VnCITsEhKsR7Agp$14Hs$aRW+D8ihBoRg$iPlybXj8MX67k2iqV12onk$A7J8MRF0SmoImbPSQygaAppmFHA8Sjh8zoPAsLQBNFHqrilCUFAoDhmfMoxAGB2r4bHXfkFtbqs3sEjJ+McV4mm5GOvREKinoG0ZUZMvjhcVqrr3+Ub646MK2kVNtoZ$sYsT8o9PgbVU$XuV9hMKt21rR7XYm7KocVEkcA4r1MgGa$8etTU7HEa2hiXVt2Gmza5SpHqNkabKmAi7rVSaMotk+UJ61BawvEVFwUA3AubuJf7rWpLoKXCx5cvEle3$U2G5n2u7kle3OC6P5Mp$KuInA0UX14bPZPdmrbGJN+I17ffQVMA68B54q8L8dIe+q06frhR9ASr6igUXfS+qN7kIs15i6y4bamfqgzkJAGU7ohK7kV2ka+KX9bAVVY0zbgoX+nowDoaWdbe8mMygysHVqUby8VzQ4yFkBDLtzwtBj1f+vjkVb+xD6toVSjAhW85nKXbR$xqwhCIT8wRbBHA5Wy9UrwwRnr7yaElDkgAFZF191zAU5wW1+Rcoyiqd2Ri+oG+s0FTaJgPijUzIw4j4VDhnRQwMX0VK6nXyyAA80fc0JS8$Rjak63b4jPWu+5pbP8GMw2X6n+hoi18D+s2TJqSVZaIefb$0FwrFk7bdmOOW2OIp8$Ubt6Ise51Mosh1aB64OeyJsiXAEDAU+w9RPSRDycDnl46Q45DozbOJ8f1Rpp5zOjOy00Ub$4c8A0Xhdc+U3KmU8ADTyTiRn$MFBiNmZbciiw8Rcoh6hJ93aBUcIwyN61cFQaSmAmlUYogy5aa3lKOzJtGQyhjDglUo84yuMsALa+U2AwC2wf+6xt+ULXHU2Bq96MirlnnX8KN7kI6R+AgOCrK7fsJgAdljLEy91poygtalJy4bo1PRAmbjUcIj8E6Yf6Yq8xOinewv2C8Iin64rfWNJHVfoWiwZzFr2DsXVZaD5tiVHPBjHAH9$JM2mrfEkElqDHsRN4b2oVBRM9rxCXEjKJoefUtoJxZDbvDYx8W9Si1xLevwpoogkrlKZ+O8+PW6hv2LuXyUXwrDW4tmt+nGWE08WqDg7xnmXwTDY4Hj1pJeQfLEs8crPno6Ii+yyTsqr4iLppnu0hHC1Jynb1PwWpq37BbV9PJvkA3iemCPo6dA4Pm82yj+hmc63BDHp4qhvLbbpJfsu1jPusqIA7JgnSBTeuhrxk0DRTn6HKjklp9GlID$4FhMQ50kHUTTIYXnyFr5A7AJT9CsinWRU9M3cTubKypUybnhwO4MYThaa5LkT3GTuLX$79IQ9vL9XcxsjsKOqaP3mee2yVpKh0iJ36ef2yj9OfKa8LI+3zizprI5DKL86t4JDlgKraxLRnZlHdMQy89x3pM2dKmrG5sAI5rRD34NMCyQ99UeeV3L+sQ5uk1W6GEc1dj5oubF3RnuyRzpYh6iS3Rn+oEjs$h6iU3IPVowHp6GNIH8wPxo5ji1BCih3ibkoyVpD5in$LxfZ3mTYayQnO8IR0L41pKqXQP33fGYJt9I$rn4CsgtY4D9Fhsi23gn9g533Wh$Io84UmwFTuHyKnxQ41ftTjsLhOiEnqPztEt9wBiaiLkPlt449ebiQBURn9tFCYKPi9c8sy$Ey0AIDI$oQQCCvwJbshpbpQiVgQo2F9y0ar8QO9vEWYABW$u8Tf6qEWY6LH$u8RPgk4Hp1B4$FMHPUkXHz6BP9HlLVbD8IphKN9dmmyr3Kb7f3m$Rl8nspEzYb52Tb6an0Y4ZYrIB$ZYObectlCpg$icpRnuaykHMGFaglye9awTYj5qalQQne9tFHVLp9eY2y9p44zjhSaZs9P0L43ziB$ayl7wGJy1vyyc$jlFHQ9hszTGriZ3Ty3WT05sfNRcLs67R8MQu8a$EMhmd8Amnp0xJeApfIHowPe1S$4XmVSwjzH4vZRb1$TIDgAoFvloS62OzQhUhuPSJ26y8KwMc8WoKc$BBCdlOQmaqWHSzD1u1NJoGTuO5Y+TrS$f2q5ooKYbmBF1gaST+9BLiwFDAsIHf1AAAcoqCFO91YOCmFT7XfYrusa1KAQMMxP1tntYHcDatjpoFoaCkAxB4W7FCM1f15DZl$Q1AAml6dw5sKRH1FGAE6NIM1Kj1YfgXhfq54RjMah8mgK6M1YO2L2sOSg2EEwzhE6A1v$o3AKj6AoOooKDAAO683OejA$tQnRVosfMoZmgzgDyA82ORej6WzqK49s33TSkE3AD1okY0AXeFDPz6AQDXSkERf7G5sHvZXSQwMAOZH6A33eejEdeQPo1A0BCo3A2W275rCUZb226oI2woqz6AteQEgzS+61fKgtm5Ds4U6jt2ZvuTdAgVKTRVvZAAoTiIiIMlZMAvA6iGXahswAQS46VAObMGCoyh1a1OTV6K1o$BsommgoXXAEmw8TvJ18CQ8aNIcUV2mmEIE+18Kc1pg815wjuhtHD6JkTRPs1Zy5Mrn0AapIXxXpWrnq3D5D$TqKJWoToP0lc7r8HoA1YAWSXZwANKOUH6gh5c6J6fZ2XHN3AFjH8CE1H6A0Byg3Af4COiyfcGnomAH4xABFsDRMkXMc5tb8O2Fv6CPEWZR+LOM6g6IFbtmsREHoYf7o4Cx6t6i6N$Gwoq2hAXNvT8CM4niCtoSAvTAV8nnECTMc6OVAAvH5xSApovjZrYTwijd$zqn03ue+EixqKFTot6RANHLDAAaeiP6AA"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:35 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: aFtWUV3PMI0/MqlXZzBNSA==$eP3A2pGEGZIE4fWWWrG4wQ==\r\nset-cookie: cf_clearance=NUEDHDMNB8bVZaH2McEks1ozTxh9mB1o2qH6h5AekgM-1777545275-1.2.1.1-LtsfIsGEfeDiqljjOX86hVV8eprZk6fEbynNOQSNYQJUgdZipE1dbO6FGCRuLyqE3Zg9YqBF2TiLQxHA4z08XtfF9vKWB4KKjmELg6onPKy2IYgAUStyAPanTxmcFEllYS8A3YVEGydsYJvQ0Ucjntgm.E8jEUstVvS_ZgUeuxV9EVX96EWFMmaROcM4OuRupV8_Dgeq.IByQkaetoGWBy7mujs.KsO7Y5f9F7JIUqsaceD_SP5eCKvggntrb1Cls.Bv3M1BPbXXlClhOqkEsvWm9sDlodRGbEQg7SWuPGRRtPgIbbjzJ0.J4.GOyd4M9g09wO0l0viYAIGyV7C70g; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ogaudit.com; Expires=Fri, 30 Apr 2027 10:34:35 GMT\r\ntiming-allow-origin: https://ogaudit.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f45e5120aff56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/solv-protocol.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/solv-protocol.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 230\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8a56b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfs8PpcjeZHgE75pdVESxdY36EE0dYBfgcm2j4njn3Dw:8b5cdc5c7c43578c61707286831d4b31\"\r\nlast-modified: Wed, 13 Aug 2025 15:52:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":2467,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=71+0 c=0+0 v=2026.4.4 l=230 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hC30lAB5jJVtn1Uhc6%2FT%2F3r9fu06pGCs6faSvhVu7HQtA6O54qXAqugGxg66PZLeuuK%2F4tjkGS0EbTuc%2FojjgTUy5e8zx%2B6nPh5kIJJ61G62tE%2BgjQhVg4RTrqYRtGtV9cs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8ee819c3207ff4b28e50336631ceaf38","sha1":"65609ed4cdd0644f90b2904b808aff3aae493db5","sha256":"fb9acd49152750c128a24d54cd259fbf9bdfc4fdb1a3a3a88fe4ad4085e7c73b","sha512":"26fecf6345f6d2935d0937c1cbef12d2bd229c5312ff2cb13414a4000506e0db9b1c9124dd8e30edbfe7023ce5f2627480c45f9aac36c52883e59ce82bf93471","ssdeep":"","tlshash":"9bd023620f380c31cb6c5c29f1284be0f4c2da14d108651ba0019352fb17090b3c9e9f","first_seen":"2026-04-30T10:35:06.590059Z","last_seen":"2026-04-30T10:42:40.681945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/bitcoin.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/bitcoin.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 12242\r\naccept-ranges: bytes\r\netag: \"565e8c524f6da22928811f836d0b92a2\"\r\nlast-modified: Sun, 28 Sep 2025 20:00:56 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7NQM2vb0TjUPn8mmrfJwNWX0tpKanrJxtDuAj6yDH6aUnajYcNkboNuc%2BPMorD4qyJTdkOhvMaBUKkDEwyM9y1IA7azDkaZNKLNdUxLLqU%2Fi8fuKfkWiuxgnDvqSY1jDD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"565e8c524f6da22928811f836d0b92a2","sha1":"c52a8b6052273f04ffe097517461948beb849d3b","sha256":"1eb4e75d64a76a5d1fba301715ae227c683b34e8f75291670cdf7ae2a59de86f","sha512":"eaec675e23843f9fbe93edf354d54bd9b35001daa17b2345f6193e004035f1d16e0f5fdd933826a0dfb2e58e803174adf0cffdedba3ed561b1f1f528b15f4263","ssdeep":"192:CcG4VfIT9czHUiIxaA0BOlAD6sXLsU9Hogsr/ncqUd/gaPQ8SB+Dfd4rfMst/C0b:1G4VfIOExaA0Bz6aLmncqqoFBdLMoC0","tlshash":"1a42c005aae317c9cfa9803311a524136489c3800e65e8e6b1d4dc7cee9eb096fb37e5","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-05-11T12:44:14.005455Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/parcl.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/parcl.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 404\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8f56b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfiDKNADNexSzCzBdoHyibWrzjE0dYBfgcm2j4njn3Dw:d5b8e37f10ecdd186827eb6ae7fc987b\"\r\nlast-modified: Wed, 13 Aug 2025 15:50:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":15089,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=77+0 c=0+0 v=2026.4.4 l=404 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8wQ9nY7tFNjwU3Wx7XlEMpLQ1DsJK4FZTFZF9%2BdaiSz0VEJ5mTKcTaS%2Bq6dWosRI8j7A2tD1zWQH%2FylMgqsuaI5IEurcc6MkYMb0gx%2BA8L6w8nHZCT%2B7Mj9crlVG0TqhOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ab601cf258ea3984d6ea3447c9c7055d","sha1":"9cb5ec3159a6a1a84e72886a1de9b8f2b2cc2e32","sha256":"3214bcc2e08b2860e412168fac37affc8ba0d1b1f2000f1418495ed5cf459771","sha512":"a583fcb934ecdb0e417ca00205eb86acce96dfca6bc3ac75cfe56763b71a4e300d2cc81ea5dd0844f0d592e3154b71b8cfff7cf6d0b650abd02521576764b246","ssdeep":"","tlshash":"b7e0f15312a5f38a8435b2189e742d95017d093af00cb40fd39d82a568dc3c5317fa3c","first_seen":"2026-04-30T10:35:06.591582Z","last_seen":"2026-04-30T10:42:40.692068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 25464\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-6378\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1739008\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CS%2BxXyNI0PEI9EIk3zhMg0qxvDkWhA95xRltUOJz0BzuAIJDt5i6M%2FWoLas3k7GICfQtoDptzi0kCG6fPhvytVVx9ODk8MRCjhWbYp%2Boo%2BqAoRzWWzF9U3NxI0GwZOnfWSx2ZZrG\"}]}\r\ncf-ray: 9f45e505e8b9b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25464,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25464, version 774.256","md5":"2d89b49ac28614e9ccd9c81308b5120c","sha1":"46e272db3db1072791628679bc469112c8e41017","sha256":"c732f106e91bc618767fbac8e2c7b27e5c736d477b2bb4fb83f597a43198c33c","sha512":"ea52d931fe445178877aa558f6c7702b6f5836a938d51809605317f8c690356022745d4495aae3ea7018e8314a5e4c583fc58b28dded6309a2e1c37a89160bb7","ssdeep":"384:47kVrsDbxAmlq9YVDlI4zwZ0HupU6LnbbPT78/MktAxlkAhxA+iQ4QE8w:aCrsHxll7l4pPTnhjmI4QM","tlshash":"19b2e1bdb1ff69e474742512c5f42129760fe59aef31cb2a34a0e676f2460d826dc1b0","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-05-11T14:24:00.570637Z","times_seen":3337,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":63,"dns":6,"connect":4,"send":0,"wait":10,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/logo.svg","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-67d\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yb63utVEZ%2FCJM4Dih9d702S4TSP2pYuOuCDYwN7zwYrxPim9hgI2LKn7IPAs%2FNp1T19yZcP5z6fxq0i4bLNwPY4hVMBJGZqa9XRRGvo8rxqD2NZW3HJPoWLiOL5nxg%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e505ad0c56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46f4ee1dea8be33423e9eaa13ed12e18","sha1":"1bc64748e062650ecd80eb9aa026178e1dba168c","sha256":"4d786883f6d1efb659aad68684783e9e13b66c61f54c4520e9bd653fc87fe114","sha512":"2cbe4831fc73bc3e98e254addb21e2d767d4786ca510f492d557cab64a2af6a8690a367558af685d122cefd2cae79eaed95d0ac526937baf892f95dfff0510ec","ssdeep":"","tlshash":"1d3111b643a457bbd544c3c88a9919a134f5c4a3b205d2d9bf6f9853ff0ed530071aa4","first_seen":"2026-04-30T10:35:06.59295Z","last_seen":"2026-04-30T10:42:40.59513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/dogecoin.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/dogecoin.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 19685\r\naccept-ranges: bytes\r\netag: \"4b9373b2f0e40c199326fce52975e66e\"\r\nlast-modified: Wed, 29 Oct 2025 12:14:26 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qq%2FiRF7oaGJTz1OiRTmhJesRYpRSB0NXPz8j91JOmxc7FS2GdahmaJORS36Dyppnqo87v5RhHop9Mpx%2BbJNUj%2Bx297pOD82uRRB8pFqz85J%2FK7W%2Fp11U62hWxSyRkymIpFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98356b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"4b9373b2f0e40c199326fce52975e66e","sha1":"65beb65f60d675cfd46b16fe1d39ce241047296a","sha256":"7b89a738cbf4631d16957f17ad00d5da01a9706012e69e12e73e767001685f5b","sha512":"d51fe44b039150f831c9e8c98066e6bd53a00ec44f761fc83a1d661941a516a7020ee818ed6d667f70033383b1c9cfb3c12c807385d114b6dbb40154f0874b35","ssdeep":"384:w6OLJ/UCgiD3Tl9IshjjNlwPRcbW1DBMULYmAdP9y68zf:DOLqCrD3TlKY3/wPGSNEnFyvzf","tlshash":"e792d1427243a52a9fc6f49416da420ce0114ddf13f42f1d234bb6a2b1bd18a5eb6e3e","first_seen":"2026-04-30T10:35:06.593794Z","last_seen":"2026-04-30T10:42:40.68055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18714\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"6696a8d8-491a\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1836038\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPf8eBXLS8sLH6JdbbhtVs8yB3bqfvufICeBRH79c5WoCjLWDINPBaPNw4RjzRLRP6WgLoR%2BYUdQ%2FaOzjrWCs1jFkgwmjdyBTiFzGp0uMg5VDng6QQkY%2BYenRuxYEBc7z9EGw6Yw\"}]}\r\ncf-ray: 9f45e505b872b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96518,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58966)","md5":"fbf1f3445f2554bce753c92cf6851b41","sha1":"3c73ff1cd7b97c189f139367dbac43dcf5d2c70d","sha256":"e5e202e3c899507992952533f57b634722b69b34241d271963559d31aa33ef81","sha512":"29cdf6def18112acd39a8b801029d571ec90ab2a9db128aa2d021204bdbd6945b853f33ba523c0fe0114650aafd5cc31e0e9d8c53c6f7b950c839193e8be0926","ssdeep":"1536:E6M1MvMaMfMRQk709/bQZMfjSFOlyPG9dXgRw0J:H709/UGGFwyPG9dwRw0J","tlshash":"559373f8e44c05d97732c44bab55b37c65b6f738d5810ca9f02f590c2ad26a822caf79","first_seen":"2024-07-20T00:27:59Z","last_seen":"2026-05-11T16:00:07.071749Z","times_seen":11668,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":29,"dns":1,"connect":3,"send":0,"wait":14,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.1/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.1\r\nx-jsd-version-type: version\r\netag: W/\"17fcf-G+wTgIPTsn/2h6nUG4C3l88gtwk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\nage: 817627\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13601\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98255,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"edf74488a993c84b266b2de3b9c14456","sha1":"1bec138083d3b27ff687a9d41b80b797cf20b709","sha256":"bb6fd8cd85394cb367e8ac58e47292f2d68eb288fa12fab68e65430a5ddfce48","sha512":"91838c89aa0a31927ee0120638ab81275f7f4af04d2acb9385dbd91e9a622e327fd51004afae08408a14936730c392c92d63d1a263383778f8f9ed12cd87b90e","ssdeep":"768:eqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMR:bOocm4FJwZ5ijINRDlIia","tlshash":"0aa3eebad14f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad72dc","first_seen":"2023-10-28T01:22:49Z","last_seen":"2026-05-11T16:15:42.412001Z","times_seen":2062,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":149,"dns":52,"connect":38,"send":0,"wait":37,"receive":6,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/custom.v2.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/custom.v2.js HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-27e5\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEKK%2BtqfKLlKAFQ5pUAkH%2B89vZ2HsK7ZSc4rHHkRqcrXtZHI3Us4GGwwdVePgSJ3MWmMit3PHB29quvwsInm%2BloOitPNFS66kfMVshudgyvzrNrlPt2uGRyMs0qT%2Bw%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5066de756b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b5f653fe0ca02222b724546457503323","sha1":"c603163ff0ab229dfcc5c178b62f305307bb9be1","sha256":"8ed5fae513f60c62cdbd53b465577f4b58204322678fce7b4b9ce78fe21553bf","sha512":"6186bc277c1e5f9d6d2a27c9b4261bf255ea02b14f0ef74aab6a283f118422bc82123bcc6618dca8c13b4f1e5f745bf3560a1425f7d68cc366713aeffbca04c8","ssdeep":"192:x2A6Df/G9xs2QK2Qz8an6s0lMw4bah0vGkISsC7sACEhARb9VS0SnAFYaJ/d:4bs8a0lSl5+SfO","tlshash":"c122200ba2f324b6842ba2bd5b6f7329313a51071086dd757f5d83d00f9a87417b2b99","first_seen":"2026-04-30T10:35:06.59573Z","last_seen":"2026-04-30T10:42:40.619751Z","times_seen":2,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/surge-4.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/surge-4.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 328\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9056b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf4kHwF26brlaLJ940PQdnzGw-E0dYBfgcm2j4njn3Dw:6895993101f18e446323cb6ff3dbbd2c\"\r\nlast-modified: Wed, 05 Nov 2025 08:30:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":6162,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=46+0 c=0+0 v=2026.4.4 l=328 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z3bokA7dnMWud5m7JgFBaUHtfJXLuwcFk4XmB9KG6OrHr9cy6LEjujlBwOAs6KImzyzmVuXnfTEydlRpUF37L9W4U6wQd0raJPWpeXt2bX8fLQa2agtIqaMhPCdZPXzrdvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c7363b6b22f97880b10ee5b32461e35f","sha1":"c8446f1c05c7561a377bf919654eab107ddef3b1","sha256":"0d04c6caa8b2225fce6c7022cac149f49c7d370300fe794e068b38b00a50bc90","sha512":"ba92f426d94c22e81a62ac53d5dd32151b0131a6874f44e982ed07f1e9af455902a196b59fe150368ea6a5a9df560797f002e59d68c52ec5e5a1e74fbfdac4ee","ssdeep":"","tlshash":"45e0c65f037294acaa76b83589a8494873cd1608400d4cf0a08b28ebe203a40aba8e49","first_seen":"2026-04-30T10:35:06.59663Z","last_seen":"2026-04-30T10:42:40.634288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/hyperliquid.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/hyperliquid.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 14684\r\naccept-ranges: bytes\r\netag: \"5ecd95eef82bb9b68fabaad58b65bc78\"\r\nlast-modified: Wed, 13 Aug 2025 15:47:55 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms1EK3LnNPSyvBVdDhcfwdNygPrTwxtID7h6NPd4WRJF7ILmiUbAYnRs%2Bjkjha8pCHopTF42bez%2FWlSRzsm14gUZ4YRaBDORSaNsMXQiad2E7jzIBiILIVRwpISkgtogAqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"5ecd95eef82bb9b68fabaad58b65bc78","sha1":"d8d098897625f450810fd7c13062fb132dd63970","sha256":"d13bb6e4efd3cd15d633afa5a5ca905cdaabbab0f3d4ffd7793e18536eebd6a7","sha512":"da5c63277ef5544745b348126c1f304e314f417f9536ae1826d33dac091d70242c42bf30656d6527104ac1badfb3cf7c1a2e3613a263233861e294dc3ff9ed65","ssdeep":"384:YTE8nIdyiADAGzBgJCRo8AxXF6ZxWi3VE0RMisqt:GIh4oxFVi3fRMPqt","tlshash":"5162d07bc0f56e91322892d96c4ee0f8e18b3496928131cc0cf267552a6d07d52de4dd","first_seen":"2026-04-30T10:35:06.59747Z","last_seen":"2026-04-30T10:42:40.627426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:34.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js? HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f45e50fe8d656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25443,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (25443), with no line terminators","md5":"e8e81f93a4d9a01ea6df93f8a046a979","sha1":"1732697c937527a6271582c31cb0b109e1ad92b4","sha256":"e2caeea6c1f96da2b4b2688d4f33b0f400bc0d985c97dcc15ec28b839f60360d","sha512":"0d56e5690f037b7a5eb55fd7ef5a400d03cebc4653a25716fdcea8459b9fc1553f423937c79b2113c509086b5a27e80fe0d688bc922538dbc6693928208fe9f9","ssdeep":"768:722DWbbDTu/8L8CDpniJiF3NWoLLrLKKgwL:7zDWdgCDpGiF3NWYH2KgK","tlshash":"53b2e78b76c6b12967337478d42b64c6f56a7f813e089dc8e258ade4e87074c94b6c3c","first_seen":"2026-04-30T09:51:08.82271Z","last_seen":"2026-04-30T10:35:06.598305Z","times_seen":5,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.carousel.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 845\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-d17\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 617937\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mh1UjH3JtZp6CVkJKJJF%2BH%2BhffylVB9F28HYEnXpHC7cTWTWcf0H2rqEClQWM23lhoiDnOzEeAM4TcCSPSj%2FzIKISPemxnFT50jqLnTEGTLBhOuXi5T0VKtp%2BWfXzVoML%2Fci79MK\"}]}\r\ncf-ray: 9f45e505d89bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-05-11T15:45:14.240919Z","times_seen":35455,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":41,"dns":1,"connect":4,"send":0,"wait":11,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/uniswap.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/uniswap.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1088\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060da156b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf_YanzDCy-r59ypFwLlu-sNl2--7X2KqBG1oDIxg0Dw:95e368ed5ae84d6d817a57a8ec3c7a50\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:09 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":6120,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=93+0 c=0+1 v=2026.4.4 l=1088 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nSrJgK1FbfQIaXgsKM4yjwpH%2FzUUJV2q3EiVg7lE5bbR76CXfNHZdUkBNOPIM%2Bj4R%2FAMuxXMmQ65wMMBDgvoo%2BXWnH4fkcFsQG4u1xoAEtucgxGgVxlHfJeOuRgz7Ie8yY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e10a5236eb84785e84fe6ccf3f011386","sha1":"b1248092567963033d08f348361fdf8cbb54d249","sha256":"774062794363b695ca14b7dcb9beef8f64ea880beb33c46658e742a6b0127869","sha512":"ebbd9ca4455be438b394ac1dd36b0f4fad407d381558e124f8bd02d6efe52ab28af861344051761ec97a242502a43eb0be861062db2702c5fb72428bc09b4b18","ssdeep":"","tlshash":"2f1186c993b66411dac84cbcc9f12818807a139bc347d578d5a10302236cbd4bab7d99","first_seen":"2026-04-30T10:35:06.600084Z","last_seen":"2026-04-30T10:42:40.611124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/skyai.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/skyai.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 188\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9856b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfKdsI8CnJZVUm9wEgUuPhIKzoE0dYBfgcm2j4njn3Dw:a0ddddf72570d8cb23e0638235e28619\"\r\nlast-modified: Wed, 13 Aug 2025 15:52:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":10089,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=74+0 c=0+0 v=2026.4.4 l=188 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJDSWWjzK9dEcdTqoR9nbBYYuhrALfwZIWrSGe%2F09CuM7ndP9jXtF3xt3GqZqdJb%2BNkkCg%2FrjgRIABs0I1Rqh%2BnyURIVsOWhnGSNElO5E7lHTFfNBHllMHRmU%2FOnQZqRm0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"13ae8cb86ddd2ae349addc66d978adbc","sha1":"be075351f277fdb207e01f88f776c56290794bf9","sha256":"d4dba30ed08e8e70a34454072aea940fb7fe23f1114159812f876bd0f86debcc","sha512":"648fa9f436403a4de6e01db4db0e2201cfb49226ff997aa5c1548d98ded61348ba209489f1e7aaec8abeabf6e7cfd1cfaec1c2b7847359b817cd5115fdf910f2","ssdeep":"","tlshash":"c5c0c01f2280d20bc03d390f7cf492008cb32471c3365d400580077207e1a40d765000","first_seen":"2026-04-30T10:35:06.60098Z","last_seen":"2026-04-30T10:35:06.60098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 157192\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-26608\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1822590\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IxWEakpL9QzAxppma1dJ3xaAyLedb0UWeOdkhL82LvZwGB7AOInjuAtFIABTeR%2BOJW2FAP2%2BspGb8hFsBk%2FIy63pOAYAxg3hdCB9QMiyNx%2BA4bichxNZY0%2BlEd4OMv9GfT4RctkO\"}]}\r\ncf-ray: 9f45e505b86ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157192,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 157192, version 774.256","md5":"237f4a0afbdb652fb2330ee7e1567dd3","sha1":"69335cd6a6ac82253ea5545899cccde35af39131","sha256":"1f0189e087fcefbf654fad74a3a06668b782c01353a61d5c0b7f0bf23e33c020","sha512":"27e8e1f91507179c207f93a19485738ed5d372a977eb27d44a4ed163013097d38b117c7a5bf4336ecc9862ca514d78ffcd2b8a07e304bbfe1b2cce9c087baa38","ssdeep":"3072:Qeqp46DjdHdb7UT/IGFc27+78oGmfIXe0pGRDH9tQm1pbYqup:Q16n/IqpoG2IXZYTtxrbdO","tlshash":"5ce3125bf5e6dbe5525e6d64fb5478972b1030823ee11cf12ce2206eb889317399e08f","first_seen":"2024-07-18T18:39:32Z","last_seen":"2026-05-11T16:00:07.061883Z","times_seen":13031,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":12,"receive":7,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/melon.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/melon.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 606\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8656b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf-OweNELDM0iW-ZbRvMJVHpAxE0dYBfgcm2j4njn3Dw:a856ac92dd49e1cdbef7547a68ba32ef\"\r\nlast-modified: Wed, 13 Aug 2025 15:49:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":7430,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/m q=0 n=87+0 c=0+1 v=2026.4.4 l=606 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CF9%2F9ygwaqCzRDb9cuYTPjvKZIBJTJ9ua%2BTAvZuOLrOZ0oIcPzbCaOTCQI1MI0TWDZEb2U3KF2o8yvb8BYK2uUaxEJdmxBrQ907vwO0CAvT8ZiVxWH6s8h627uWRcUTbRrI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98f927b8c1f9d2798179cf2b18f46c50","sha1":"76037f8cc42f9980211af3baa02e0d0f9a1130a9","sha256":"1271f9d4262bb2a7529ba1999fe98b7be02ddc590bd03c78e12311c48a52c39e","sha512":"7b6622451a39993c052c1f8eb570e921e8317ef0c17b484f037ae3a82499f636632554aa6a83cf1e6294b6f9be55046265560b492bf0f8789dfac1086ca1337c","ssdeep":"","tlshash":"cbf00265d218d4e1ce9f2721e79bac0ed06a434f0465669cbc415c6669acc01a803a79","first_seen":"2026-04-30T10:35:06.602344Z","last_seen":"2026-04-30T10:42:40.60607Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10158\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-ad36\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1754646\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IdfIDOu1vW%2BrHFHeYoRlVK9QQqxPHJpdB7Ov7bqAcKTIzx50BqNMVJCkXt4lEyN%2BoSOzdMWmgYwyOP%2BbuK5zIOel0WXq9XACNONthUhsqq4VosTfoaP4yclCLuG3SP5SUdhwTIMt\"}]}\r\ncf-ray: 9f45e50648d3712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44342,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-05-11T15:58:48.892004Z","times_seen":54959,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/5.0.8/jquery.inputmask.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery.inputmask/5.0.8/jquery.inputmask.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27085\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64121092-69cd\"\r\nlast-modified: Wed, 15 Mar 2023 18:38:10 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 596676\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7nys9b3kguqe5o49rCY0K7HYqIsGYIRQhVbeMzqSiLkvkj8YuYG9seR6P6AdpOPgtTSDrWnl7AMX6bEiTU0CWef37arEAUIQzKjCmzsSC8n6AaAZEmtRVT9Dy8cOe41rm8RiBne%2F\"}]}\r\ncf-ray: 9f45e50648d1712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103811,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65359)","md5":"81f94a32c81f8dce47da898abbe9aa6a","sha1":"4b6fa33e2ceae104562ed4ff46367879fd75ec9f","sha256":"e688b01c80a57b4c9346764237665e26d200ac7a77d3c08aed561ba18f0535ef","sha512":"79f01c8d8a184f4b17c5046dc46637ec22989aab0554e230300a5a11baf126be11c2a5551b0f28f8b7e1ffee7d4d4d3bfacb999f5056ab87c39797dd83208d93","ssdeep":"1536:6Avp4lhumzhbbfhJmqRP5+Jnz8FtGzK4fs:bvp43BhbbfCVz87Gzfs","tlshash":"e0a308d97552b16287e371f440bf8406a23beb2964999050b25af0d0793decb03b7f79","first_seen":"2023-05-19T01:09:41Z","last_seen":"2026-05-10T22:33:55.896664Z","times_seen":366,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/vendor/bootstrap.min.css?v=20251114","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/vendor/bootstrap.min.css?v=20251114 HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-389e9\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsUHXevzji%2FNIJJ3S7w5Ui4RevOvm4t3VdEONsZG%2BRVlaIT47ybvXty5VGNLyBy1%2BR1KkTkIQ5OPVhinoltru3byRoZ1psvd4YJHuzA8zaKxbeXqVzkLMuHHhIk5vQ%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5056cd656b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231913,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"f2b0c1e1ef80d83a93aa2f524af4a2bb","sha1":"430623636e5483f824bf74634fd95b895e2c9ae2","sha256":"cf33e1f0d7e5bc422715b552ccb60654c2ce9f48f491fb23abf52535e301458c","sha512":"54a46e15204ebe17742bfbbc385384d828567dbbbca8abd78c65a2aed3b39d36ae0929297aed2cbb2120d999b926a06e9821c938125c4df13bc582650e39270a","ssdeep":"1536:p9xnXGi9GfJkfvq5wlP7wQZDR9uvV98IsYRElV6V6pz600I41r:dnXp9GfnV986I6V6pz600I41r","tlshash":"e33482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-04-07T11:30:19.243874Z","last_seen":"2026-05-11T04:45:06.668122Z","times_seen":662,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/bitcoin-cash.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/bitcoin-cash.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 13596\r\naccept-ranges: bytes\r\netag: \"b2e35d50853050de26063b87cdefc5e6\"\r\nlast-modified: Sun, 28 Sep 2025 20:00:58 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9thknI6Hh0RwlW5atDKJOkImRK%2B0sk2bHQN9dBZ6U%2FYQdfHmfgmkAlu12G%2B5ApoA2bu9uPoXVfmB3sQSkaZtE7Y9GIU19L31BpEPJ2G7X2QuDLwZDAYoyQ3ahrE3iyeUVpA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98e56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"b2e35d50853050de26063b87cdefc5e6","sha1":"9b633ff58b735f4b4b2802cdb8a3fd315a598ff9","sha256":"e995b5711e4371d683b41a50409997881964d6e5e0fe23b3171fcef34c37048f","sha512":"16f39adc31110bdcb89baf2d7d1814befb4c042c71f736f984b3a2ec44eead01dc3d395116e1b9ad12cffc09beb1ac38a00f41ab3dfc3e946bf3d901e1d94760","ssdeep":"384:fBcp8Cm1bPtR9tt1e70BcnEy2rT48cw3IxWAxywg6Oa:yHm1b1ftC72cEjr4+sQwg+","tlshash":"b152c06da67ec152c04a29ae9f584ac28735f3500225c9bf2b7db420534dfb0dab9738","first_seen":"2025-03-07T21:47:35.345537Z","last_seen":"2026-05-11T06:55:32.254705Z","times_seen":203,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/tether.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/tether.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3739\r\naccept-ranges: bytes\r\netag: \"04270042cc3a45169f6b45197d924969\"\r\nlast-modified: Wed, 13 Aug 2025 15:53:37 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0CzfT%2Bz%2FL9QODuMkyiuVgpxC8XFH9gmwDchvaBiu3DikSnpsOVlra8G5C%2FzzL%2BkkxQeUH53%2BfRqEMaWja%2F40oJ5nRp047N23iVob9C%2B0DcJBZHXFVxAEDWzZWOyOQ19bhk0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3739,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"04270042cc3a45169f6b45197d924969","sha1":"a74ddb4948a5fdbff9d63a585e12c5c58db30c0e","sha256":"1e41708f429da5f66452f6defb877fe6b612c4b3c78c42f9823272db454969d2","sha512":"2fd44aec700532e1ad1d0252aec4ff7f5a0ab337480f055a498fc74570a76b4ce141da598e456d96e1014eed1d6c2e9294f19e26b86dfd5ae7f3f9e965a72d33","ssdeep":"","tlshash":"f4714cf51673eb439f10f8a9623588fa4081029f654d148df7eaea38ee193d3258bb15","first_seen":"2026-04-30T10:35:06.605089Z","last_seen":"2026-04-30T10:42:40.655182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/ix-swap.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/ix-swap.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 468\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8956b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfMr5rqYSG1yfgZs9c9XFRfVgfE0dYBfgcm2j4njn3Dw:ae63b49aafafeb9f5599440d2ec20bcc\"\r\nlast-modified: Wed, 13 Aug 2025 15:48:11 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":27943,\"original_pixel_width\":250,\"original_pixel_height\":244,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/m q=0 n=59+0 c=0+1 v=2026.4.4 l=468 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7nLwIQ%2FrSgI7tIp2A6nnnRF1ZwcHaWJZZIZWpZEeA00inzjPvgTtQNUMfNn9jq%2FDj%2Fm7VfSqWuxdkxB176euObJcNu3n3QtJbfZv4wEABHDOiaKOeeJ%2Ff3TOnniR9LT96c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aff802085d0971b75d1f804ccdde10a7","sha1":"674e680ff86e1e06a65bdd8fd46471d625996693","sha256":"89e51729026b987e4b74c6f8b33c3bdc67097fb7fb2cb182f0213ac3c831dbda","sha512":"5294d7aade14e2e702a09c340e1519a4384dfe22bb88c0bea1d5011137ae3986b357c53189ae199fdea9d21c1f1519fc782867c153884562f1621b1e09cb93c8","ssdeep":"","tlshash":"28f0d42bb454475f499d39c9e99441c944581d6ed232402494e761f673313c96d70c5e","first_seen":"2026-04-30T10:35:06.606029Z","last_seen":"2026-04-30T10:42:40.635508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/singularry.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/singularry.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 372\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9e56b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf7-bHZBEVdkmj0XuRmNFC8DN0E0dYBfgcm2j4njn3Dw:c3388d178cc448c0437c72f288bdb49f\"\r\nlast-modified: Wed, 13 Aug 2025 15:52:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":9057,\"original_pixel_width\":219,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=107+0 c=0+1 v=2026.4.4 l=372 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HPPnOLTk1BKQ%2FvWrF%2B46gu91icaAt2mi0HCVWT82nI0hlZPkwwgDCAWbtQoDICO9KC0t%2BN6myszYvdT6Kf0r4f532w0npoihq%2BAELx91jFgP887V7d5DPyBoSMn4UeTr1vA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e65b51c30c24d65748a1d9532ca44e8","sha1":"e9ea83f21b45591d56a04971b29db367c8a5f817","sha256":"3a62451214c9b7f5cff196d6e3b88fd209bc7f4543a6aa9cf067919e94e97d8c","sha512":"0104ff9de8742498bbe041e8ddcc8b989193a6bfcf62d64b037f9c79583d4fc46b1c13bf7328a6d9eec9bbb4f86a91944f817d6d9bcb3788d1f0f97a952f8c1c","ssdeep":"","tlshash":"e9e06800492024a5d2887b9e7f922abb5996460e49c8f3b3211663b33390d6672578a1","first_seen":"2026-04-30T10:35:06.606837Z","last_seen":"2026-04-30T10:42:40.637013Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/HaNat3dDbIrVrQd8V6WEP0QIrDwBzBywYy6xIunX.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/HaNat3dDbIrVrQd8V6WEP0QIrDwBzBywYy6xIunX.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 478\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9556b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf3wnbGREjZoIQ18zPrd1SJ2TyE0dYBfgcm2j4njn3Dw:e440f349f6f3ca950f2e6c92d8502f02\"\r\nlast-modified: Fri, 13 Feb 2026 15:20:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":250388,\"original_pixel_width\":1043,\"original_pixel_height\":588,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=86+0 c=2+0 v=2026.4.4 l=478 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCFUudSl6XP4QfTjnDJeMr06y2CoAUFYgumkxk%2BKF%2FuUFqyEpXYZ1nKDMATqZ9nuYRNRek70EiF%2B786L%2BMdUtdEMwkTy%2Fl8m42sqqjdoJm4oo%2BHjauC6Mk9jnbSuqKRaUWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a28bbd4ad7b8ad5c42010f5fb5ca9d0","sha1":"c42a7fba1e4f2473f78cd27f654790536fa0b71d","sha256":"f048422330d45c0cd6909fca5e530fd773dbb96b14895a4640a7ae68047438f7","sha512":"f5b62caa041551ab2ad6d63b4fbddcbf2415b288307d21f558737c6f7f7bce43eb963d5f81068336bf1b07d19e29fce420d83016211237aa866fb821acbab58e","ssdeep":"","tlshash":"d6f054fe401050ecc62f3dcd0888538089542d327bc6355556db23d73932f255007b0d","first_seen":"2026-04-30T10:35:06.60766Z","last_seen":"2026-04-30T10:42:40.617029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/ztSxYBDR1zPLokhd20EccAA2rePcBcqFC0scRf36.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/ztSxYBDR1zPLokhd20EccAA2rePcBcqFC0scRf36.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 384\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060da456b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfxRVHmAr9dtYsm6e0zQs2kqFuE0dYBfgcm2j4njn3Dw:2bc1d686c3ba94ac23f5246a6d0a45b8\"\r\nlast-modified: Thu, 18 Dec 2025 17:39:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":82653,\"original_pixel_width\":1019,\"original_pixel_height\":510,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=64+0 c=2+0 v=2026.4.4 l=384 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afsvh6deu%2BNDLm3y%2FrZJ8ED7EXHWl1kRVbb6vzgiaRwMTY%2Bjh8t%2FTrbRkNs8na%2BunTreMSTfgB6sqT0cNSbgaF16GmYo0LbQaCXtUcsVuoPS1LosZH6GmAk8Q2XYdbz66w0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9df2322a9684f8147aa1d66b9d817ef9","sha1":"210e606138c6afc584e844c8ea3b2e7c1af6f124","sha256":"9256903b8419dcd1dda69803cf0c8b9ce42c2643c57a584ea917d72829e4ca09","sha512":"ed96569e9730d1a6e01c8fef638422ccd68344cd8c096d6a1b8628a2e75dcf5443312e2719682f376a7d076ceefd07523340e09b6cc5fbec5ef03f3ebdbafca0","ssdeep":"","tlshash":"aae0682b6cb92741e8c3142f6cb92038a4e06692bda2951cefcbde0713952c22d92894","first_seen":"2026-04-30T10:35:06.608564Z","last_seen":"2026-04-30T10:42:40.613097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/render-token.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/render-token.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1632\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d7f56b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfD91TUBRWXQzTTItGMXRCX0nu--7X2KqBG1oDIxg0Dw:45c42907bb87c706f872ffa553601153\"\r\nlast-modified: Wed, 13 Aug 2025 15:51:53 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":13078,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=71+0 c=0+1 v=2026.4.4 l=1632 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpMAlpHPATYXhpZFJ4fn0nurIdgWcVkycroYG4Egc%2BPuk7G%2BNodZ%2FX3%2BvlnRMzn3XRHeR4syW84FILNf3VGaCVB7fgBlAAVh4qiJgTObge83Tndf7KJkTg40H2gBL4Toh7k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b70daf4ba44df026fba5928bea9bc126","sha1":"a5a40334e9c4324cf1b0ea7528e64113eabf3c53","sha256":"5cbdf1d20381aa3cf2d82113322e608ad24104e0868c6438e4ab3e004d016db9","sha512":"c043ed30dc6cf03441453fde40768c10b458b64d13b0ff8590ea96d3b6522b766e723264ef232afbb9a14d5e15d7ce4d8d0c243c18620a7dd88fdb0b40e2257a","ssdeep":"","tlshash":"183108084386db8ceb3f0cbe495661a0ade187204ec9e3cb05579dd88c469c2873c9ea","first_seen":"2026-04-30T10:35:06.609393Z","last_seen":"2026-04-30T10:42:40.61235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.2.0\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9f45e506aabc0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31169,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31169), with no line terminators","md5":"4f67ea9205c3ca7c9e04582d3b9bdd1d","sha1":"d3b68ad3eb88d3db3d843211d4905143c3bff281","sha256":"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4","sha512":"f034bbae022b026821045c28393ba371fe83f6b5ef1fcc66f0943525ad3587d417f04cd795d8accee7d86b82057ca74b50a4d3ae74855cb0e4504393ad943c42","ssdeep":"384:BXi1f+hZCIy1f84QDRuT9WKw00QmLnivMt+BERzR0c744BKJKe0620vFjOkcXo9g:+V584QlIrw6OPIJJtFjj09N","tlshash":"bce218eeb591b13603f7a072447f210b733ab56264494408e21bd6c22c78eeed257fad","first_seen":"2026-02-19T19:35:51.221473Z","last_seen":"2026-05-11T16:04:38.343957Z","times_seen":71307,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VM43RWN4E8\u0026gtg_health=1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:34.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-VM43RWN4E8\u0026gtg_health=1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Apr 2026 10:34:35 GMT\r\nexpires: Thu, 30 Apr 2026 10:34:35 GMT\r\ncache-control: private, max-age=900\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":216,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"ffbb935556b923eee5ff8477b0756493","sha1":"308b9226bf682ba28a92a743b4ddf4e9a96157f1","sha256":"c24c8a68f1ffcf9b37963dfdf26c4874c307feceac1245180f85db1da436416a","sha512":"9a3af3a979c26255bc27b508e7226859f22a732b120360763f70a5fe2c59f422b816c07905ddfa76f151b993f72dd0f50dd4a540e4bf572aba5afe1fdfe7c8d3","ssdeep":"","tlshash":"e4d023cdb1cc31502497f530b19fc1271013d25d4ec0d1843514ecbb0d622cb42137ab","first_seen":"2026-03-17T00:15:22.957568Z","last_seen":"2026-05-11T16:04:38.228244Z","times_seen":17447,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":109,"dns":1,"connect":20,"send":0,"wait":30,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:34:32.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: 9f45e5038e17712e-OSL\r\ncf-cache-status: HIT\r\ncache-control: no-store, private\r\nexpires: -1\r\nlast-modified: Thu, 30 Apr 2026 10:34:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\npragma: no-cache\r\ncdn-cache-control: public, s-maxage=60\r\ncontent-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.googletagmanager.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fonts.googleapis.com https://fonts.bunny.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.bunny.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com; object-src 'none'; frame-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\nexpect-ct: max-age=86400, enforce\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 48\r\nx-xss-protection: 1; mode=block\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"HIT\", cfEdge;dur=61,cfOrigin;dur=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1n%2FEfDWcxxRPkPyKKTMCP6z9JMXnoWAVnoxvXgB80uwR%2BHv8KjhIl4fEvv%2F%2B%2FJJAzap%2F6fr%2FzJLHdipM5dkkbt%2B%2Bmc1kNDCOTDnkqUOT3YkApZN8HtlbTM1ggfeyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"SweetAlert2:11.26.24","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DataTables","description":"DataTables is a plug-in for the jQuery Javascript library adding advanced features like pagination, instant search, themes, and more to any HTML table.","website":"https://datatables.net","common_platform_enumeration":"cpe:2.3:a:datatables:datatables.net:*:*:*:*:*:*:*:*","icon":"DataTables.png","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:5.0.8","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]}],"data":{"size":1035695,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (722)","md5":"d46298d719140344479970d150b992ab","sha1":"c834349dc7775504feacefdb93ee15e5da13594a","sha256":"7e6791091a8dc83e3177d12da15d335a60b2591d481c487e7da328520ad51542","sha512":"b93028c232b4ff751f4c0d62c50d54349e1805500fdb475258fba52902aa9da185fbb8a8b65210c28a27f2a67fdec1bc0c0d4193b35b7f28d5893234628e777b","ssdeep":"6144:UAG1NUP4VkZCTguPsjV3l4970LLufg75Rvx1qUHqBQOBi:T4E5Rvx1qUwi","tlshash":"72252daf5ebd3875c013a1c4b2522a223a4f9c1b55de8fa0be5d5b634fb5c48d942c83","first_seen":"2026-04-30T10:35:06.611249Z","last_seen":"2026-04-30T10:35:06.611249Z","times_seen":1,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":49,"dns":30,"connect":1,"send":0,"wait":66,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/lfuy/","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /lfuy/ HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 164538\r\ncf-ray: 9f45e5055cb056b4-OSL\r\ncf-cache-status: EXPIRED\r\naccept-ranges: bytes\r\ncache-control: private, max-age=900, no-store\r\ncontent-encoding: br\r\nexpires: Thu, 30 Apr 2026 10:34:33 GMT\r\nlast-modified: Thu, 30 Apr 2026 10:34:33 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILIqoYuFc9IOAYl5XQF9Ovz6%2FsBLfdoCaNxM3pe%2BE%2FKbzewlDYkX2FYHlTagkQ%2F0MpAqTJPpiqCaPuKSKL%2B1Tdxra8CBJuumEU1UMWx%2BOtFaUg9%2BEeYB6Wh%2FAD0ziQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499821,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"d971d0842eb490e104d7adb5b8c56390","sha1":"ac22f9a379a16efffd060eefa586b2c6b6515dfc","sha256":"f72365a670a5ef8fcb62fce1bbcff312357b84fa423a607fcb85197d26bb5137","sha512":"0afb866e9bc68841e05e13ab82bc1ddf1b84d2540617db3f895fe01491d6635f02c35fa2374de9fd139025aa672d72f2755049233f6d69e81b18c1b02cec0736","ssdeep":"6144:7Ea/jJ7mx/Em6PCBlXdRR/dLU7dG7BPKo7NFU1e34rRw:37s6PCHrR/dzmw","tlshash":"fab4f8ceb3d674625396f478503f018ba57b29a2b44cc89af189cce02e7459a4277f7c","first_seen":"2026-04-30T10:35:06.612137Z","last_seen":"2026-04-30T10:35:06.612137Z","times_seen":1,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/bvenqcVSpJElb9b58N2HoU6SGX7qpdm359v2fiOd.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/bvenqcVSpJElb9b58N2HoU6SGX7qpdm359v2fiOd.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 550\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9356b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf0c4Psf_tu9cTR-QU13ko7bB0E0dYBfgcm2j4njn3Dw:999d73abb669c06b15dc4793fc34ac7e\"\r\nlast-modified: Wed, 15 Apr 2026 19:34:51 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":277977,\"original_pixel_width\":1228,\"original_pixel_height\":819,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=66+0 c=2+0 v=2026.4.4 l=550 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh9cE8Xu2JaJBKTMv5kNvkg99eCCZpzcKpx9iHyDORRXoTywQxSInF02RuK1EUlkRGP25h31yG60bibihUpa2XknLrDskzQ4H2D1%2FZyt9ooTZt8IsdSOGorJLTxhrxFqWbE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b4d9e0ff804397054df23906310692bb","sha1":"c45767d61ee8148e79644a6c9a56f3f30ec3dfb9","sha256":"e2db7f185066f6680184d33827d271cdca21db7301665143fedca44a5fcbd090","sha512":"e7c9f634dfe6b0d4e40c27ced945f69a008e26eaab1d4b5d7ba9b10bd9c409e1c4aaf46c9e950279ec3b63f1f781ee1e56240f99d903e29544f324c9066e3175","ssdeep":"","tlshash":"27f020aa0ad7d8fc485e100ea41301e27309fa12af486794360f60235758738803bced","first_seen":"2026-04-30T10:35:06.612909Z","last_seen":"2026-04-30T10:42:40.597516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/oNBT2gUVV1WNVUKwo0IXVFhg9l1SoDVFN4s9abX3.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/oNBT2gUVV1WNVUKwo0IXVFhg9l1SoDVFN4s9abX3.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 292\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5061da856b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfQump2bQQriR074GiW33hr3O3E0dYBfgcm2j4njn3Dw:f2e2295f9c27dc7329184cff312edadc\"\r\nlast-modified: Mon, 01 Dec 2025 20:51:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":88288,\"original_pixel_width\":921,\"original_pixel_height\":795,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/h q=0 n=3+0 c=6+0 v=2026.4.4 l=292 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hGWTC3DglnfBI2o8XjxdXad0dHQkYMYZKBxaseQTukM4p5uchT94zS6rqhwuntbuzSxDVHlQS3Ud8v%2Be0mI7PgN%2BMB%2BNq7vDrbG0rSrIEk8fy02DmGMHnzC0y94876MMAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":292,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"adba54d3f23e860390355077f359e3cb","sha1":"216f72333faa8fd4bec6c37d7c638d3fa9f865a0","sha256":"753bbb5e6dc33c001b00e93677fd526dabb4c83a8207f5962610e5f0c2c7e444","sha512":"25a63a5ba8abc5d71f79abccce010bdba5112c6753c1c7459cac56d9f795b4055d3c3af2150f42fc76a9718a37a89cfab4c16badb02e92e3aea302a54dea99da","ssdeep":"","tlshash":"53e0e76fd2780dc9d8716808e7119528501a0476d81d2e4c46f18430136ff987690d44","first_seen":"2026-04-30T10:35:06.613781Z","last_seen":"2026-04-30T10:42:40.639388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/usd-coin.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/usd-coin.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 9099\r\naccept-ranges: bytes\r\netag: \"30005fee665184e5f163d52a29bdbc58\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:12 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8prjIhwO66FYlSS%2FTGkG%2FaGEPFvJE9Hk4RvJxCxx5TStEwLm0d%2FSWPPXu0klsaYPXyNeAa0cID%2Flh0sZ3bgjIY%2FblWLCAG6IPDm%2FeL%2BFM8Fun%2Fy%2BsnQiyipKULvMLAnSJo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97e56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"30005fee665184e5f163d52a29bdbc58","sha1":"22e36f0a15dc46989f56a1135757c479267f5775","sha256":"d4b08e3aa992e2342447cb0dc00bf6f5250f44f8fa5f14009d378da058034eee","sha512":"f4a89a28613c5ba10965705751d01e014f49f6369e2d711b80c0fb8e2a021fe41baf42379d7dcb4d39ea39bf76fcf0effa5c76e19c74e08f3c0e7f8f218cb245","ssdeep":"192:czPM531OqKZteQAJ+jfAmN+ohIeV1x5to7oJwNmSmWPWlNa:UPM531gtel+jfAmN+ohpHjo7VJPWlg","tlshash":"1112affcc97a7b4650ccc5504aeb09b568215e334ea947ca6e4d53b8be4d35a4dbe0c0","first_seen":"2026-04-30T10:35:06.614625Z","last_seen":"2026-04-30T10:42:40.690785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/monero.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/monero.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3180\r\naccept-ranges: bytes\r\netag: \"37f4212ef7ffc9d0e1ab0de38c201d57\"\r\nlast-modified: Wed, 13 Aug 2025 15:49:50 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rIo%2FWp3N6CULuLyx44VJs8to0hP9wF5qpt3brFQjlrXteApsrlxJOgVqhvzfJE2vfgBowmV31%2BUAWiRTwZR0Z8XBTcqThdl92R%2F0fFahngbE0J1jRskfgw57sJmIJZk4FxY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98f56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"37f4212ef7ffc9d0e1ab0de38c201d57","sha1":"4780e148a252c005e421d6dffd436b9f487b7951","sha256":"2ff089bc497e701d11d34f7785b7292763cc7d39ff15ba16790b639ea362c01a","sha512":"c57c758ea8d267564110cb03f2abcbec7277f2ff3395cef89de4e0893629da812a6cf9d07c1470ddd92bf2f8abb1505037ef1d1fc17dcab01d5bb1b03190ee92","ssdeep":"","tlshash":"82616d87c134a9c4d425dc01561073e59e744f3e0d7adaec29143ec89fbe522e268231","first_seen":"2026-04-30T10:35:06.61554Z","last_seen":"2026-04-30T10:42:40.598414Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.1.0-rc.0\r\nx-jsd-version-type: version\r\netag: W/\"3f88-kT+fe5U1rseQyjzp1uNaz682mZM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\nage: 1143829\r\nx-served-by: cache-fra-eddf8230057-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2247\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16264,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16263)","md5":"e71c39430469a3eea74514a2b48f6536","sha1":"913f9f7b9535aec790ca3ce9d6e35acfaf369993","sha256":"cda4a81c187015d95ed2c71f1841540b08203cdec5fa2a7d5d1825a3c2166f8c","sha512":"683f68a61a4543ad671593fa85762ee10fdbfd4496eeba4b0902d7e818b45891d734eec9b3f7d410da4141fffe3f836da73357d234a0479cd5bcf389a7e5b62a","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t39:1keTfXnS1Q9sWqbxRcdp9","tlshash":"6b72d935becc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-05T14:56:11Z","last_seen":"2026-05-11T15:09:20.911403Z","times_seen":8701,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":153,"dns":49,"connect":38,"send":0,"wait":26,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/hedera-hashgraph.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/hedera-hashgraph.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 634\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8456b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfVhCJxZJgsT31JrKuV7H-WxO5--7X2KqBG1oDIxg0Dw:30c8b82619e9bddb929bd4ad127619b2\"\r\nlast-modified: Wed, 13 Aug 2025 15:47:39 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":7633,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=99+0 c=0+2 v=2026.4.4 l=634 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFx3WRq0DhCOZp090Fq3xGbdPGMa3ny8aFHV%2B31ZcMS35QvP0TTgHCC7FKTJF2nOyAwi6HPmqRegAoLlG7UQ%2F7jTc26KkqmObw%2BTVQvSBWaz5bOPOs%2BISY0apnNg7EfgKMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"556a415e106c501b8617dce92165f1f2","sha1":"a85124353c493bd03a4327d26fa326c63651ea68","sha256":"7811919e8b946bdd47f82e65b85eb0b0cbfd37951eeba0ca80e7401654ce6620","sha512":"f66686462c41cb626f66519a176968c34af1f2c26b17015318df1c938adf6ac538e73403cd598ecf1d9807775cf517c411619f794ab3289ba2cb070cc4dcf8cc","ssdeep":"","tlshash":"27f0178d3e35cd0ed51abb3e0a59142046c73c1bf8302a91c020e070c2e0b452ac3836","first_seen":"2026-04-30T10:35:06.617222Z","last_seen":"2026-04-30T10:42:40.644444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/Udyd1SuheVmLqIL6rNeeruVbohQOH7PyPtoqkPod.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/Udyd1SuheVmLqIL6rNeeruVbohQOH7PyPtoqkPod.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 324\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5061daa56b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf8lySXUefZzZl1717vnAF5dGeE0dYBfgcm2j4njn3Dw:29af237ab245b0288378319aa669bb8f\"\r\nlast-modified: Fri, 28 Nov 2025 00:59:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":118673,\"original_pixel_width\":1638,\"original_pixel_height\":921,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=63+0 c=2+0 v=2026.4.4 l=324 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sO3zNhtTr6DybMVH8yHql3yPG2QnejAUKeGU0GvFyvqjIxZeoZo5rp3z8itzYuNIihVzkfv3BeqbnfY%2FebdtWyuk8uxm0AEWPf9fROOecqlDBGLI74nK33Nq5mi0NJ0ogOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bbcc7aca0a3d5416f8f844a0eeaabdac","sha1":"188f9b9e109b2d5e24e12bfd12aeea3b0ae5d381","sha256":"3e7eae708f064a179d667b367cc37dca0fdf99f8426ea4ae9d46e12a78549ad5","sha512":"47104d61eb43a9632540e728745722bc1cfd9775a84a8b7069478fb5b11e62df620f5c135cfc6c018f852d732367d361fffa8275f9d4b79627412ff624194854","ssdeep":"","tlshash":"66e07d6303236a54e4a6c6c771ac073cb3e3542f720481126c495799da7d693d2e5ce9","first_seen":"2026-04-30T10:35:06.617934Z","last_seen":"2026-04-30T10:42:40.606747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/select2@4.1.0-rc.0/dist/js/select2.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.1.0-rc.0\r\nx-jsd-version-type: version\r\netag: W/\"11dcb-beEOdKmS/KFegD2RDRMPgmYxy4Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\nage: 1077877\r\nx-served-by: cache-fra-etou8220097-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 18460\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73163,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64127)","md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-05-11T13:02:55.131714Z","times_seen":6960,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":12,"connect":32,"send":0,"wait":29,"receive":14,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/main.v6.min.css?v=20251114","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/main.v6.min.css?v=20251114 HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 05 Apr 2026 17:42:02 GMT\r\nvary: Accept-Encoding\r\netag: \"69d29eea-4d71d\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQdJIEGndSetxBS40duYrQSw3Bjc7RM9rF2MnnG10myX7mwGI5TpCCslMzWMjGs%2FLi16DoXxZ4JXJnJxl%2F%2FsZpIZcK%2B%2FCcy%2B%2Bk8o0zalM%2BD%2BnKwd9WncH410%2BVWflg%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5057ce556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317213,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"709c5f7363a2f38ba711a63c85ed812e","sha1":"f413e862f02b1c16761e0b5056c133de1ede6383","sha256":"1392904505837a90456efb22b8a535d48ca10e6533dd439d60351558610ff933","sha512":"0ab22556a3c57cbe4c28ba9791a0decd3716cdaed8037edec56c542b6bf208e535be43f750aa8e206d9247f25675228e06d6bc685e711049180a668ede56adf9","ssdeep":"6144:Cx6lxH+qTQSHvz+fUCWSHvz+fUCuXh2lHTq1QSHvz+fUCWSHvz+fUC8x9L5l51bX:5XdQSHvz+fUCWSHvz+fUC82YQSHvz+f3","tlshash":"93648667f6a5603e342bd53d31c4eaec36357850de124bf8fa96f16087c66f31622a48","first_seen":"2026-04-30T10:35:06.619311Z","last_seen":"2026-04-30T10:42:40.631265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/chainlink.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/chainlink.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 10242\r\naccept-ranges: bytes\r\netag: \"ccd4221df07f3a80405b29511344aead\"\r\nlast-modified: Wed, 29 Oct 2025 12:14:26 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9x%2BcthiRrT8reYlSQH6jguWQfzO02utOJg9vqI2Uj%2FEkZmdHhrw32ULNWYKorDHhPpK3qR88mx5G1vRXBbAgkFOCgl%2BUReOsdUVT2jIMEs9tEPOjci30KaUVZO8Ui2ixLN4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c99056b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10242,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"ccd4221df07f3a80405b29511344aead","sha1":"161152e8ea34881e8e57fb2eb219c1cff378bb97","sha256":"ddaf16a1c717fb4c6060e1ce783e9e6428ded331d1f026679e26221193a8ef2a","sha512":"7ac9b66c1b6708fd9a26871a3deded54e3f36e6017e7c9da41c737fd988f25e135dcf85c3c4142d8b954790e19eebe9b1789410f0bb6341dcbe8072ec13f998c","ssdeep":"192:83LsV7BhNIlWKTBgDFvnJXaqg7N9Byz8/t5d3khNMVrGkzx9c56r3PHNBC:83gV7521Bg5taPPBy415d0h2VrG356rq","tlshash":"b822c0ba80598c6ae2887e9405c14c2329ea0f6cffb61f3bb0840ef597d3956bd05718","first_seen":"2026-04-30T10:35:06.620201Z","last_seen":"2026-04-30T10:42:40.620507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/og-favicon.svg","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:34.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /og-favicon.svg HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-73a\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqDx7jRVgsQomNX2adPO6HhNNyT3MevRln2Q4F1HNn4pn%2B1nXXLemGW1jMpshTHhDz8Mf1F%2Fi0Gsn%2BiQ%2F9TRj6yW4B3vixQLMwPUYO8HDOI%2BppffypJbGQWEiCS11A%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e50bbc1256b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1850,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"195afa3e80d88733a53ce06dac3a3051","sha1":"256b70fe02b5fe370c6ae85bdee1bdb8f1d4436e","sha256":"879f37e7f904cebe529d41fd6a49f21e0553f0d4e1af49e4f8555508628967d4","sha512":"27558c6a9e82d52eace6fd733b72b69d1143a602eda778010493104221d1f002acf4f2f91d75fc62f91768ec4f4a5090c17d5d4e226d1c56c16863529c87a52f","ssdeep":"","tlshash":"413142ba4354137bd104c3c84aa9296620b1c463f119d2dcbf9f9923ff0eda300b1da4","first_seen":"2026-04-30T10:35:06.621006Z","last_seen":"2026-04-30T10:42:40.65617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/layer3.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/layer3.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 226\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9656b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfHLJjeMROBmB8swtG3rJKkRVFE0dYBfgcm2j4njn3Dw:332cf989d0ffb63a390885ffa7b8bbdb\"\r\nlast-modified: Wed, 13 Aug 2025 15:48:44 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":1882,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=69+0 c=0+0 v=2026.4.4 l=226 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gV6qCY%2BMnSoV9qPaujO89Dj2unUTvVSAQLhf3Pjk0RKaoXZ5DuC8LGmtmiTEzdaQaP8AosZishFzHlXSU6pbLH9s9IaL%2BWsvic%2FVRc8SIF1PCx3Pbveg16ZDipo%2FFdhaddQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69d8933d48d69e530ae4e797721898e2","sha1":"66bd8016e94c596a264875c9f84edd12e76b7499","sha256":"3f07cf1540649dd24c79325d37a174965a377a3d2baa39c06d1b0b29e0b55bde","sha512":"b903e9e18b99062433f9a7f3ad01bd13688e35dcc73b216922058debf393fcf6313ce18689078f39c8464f9d5a695933dec5aea0fa9e4eb6b31397a3cecea362","ssdeep":"","tlshash":"61d023875035f4c04e8c3ea7fc731bb010742002d01c860046330bf48e008f21fc2ca0","first_seen":"2026-04-30T10:35:06.621853Z","last_seen":"2026-04-30T10:42:40.646467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/monero.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/monero.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 982\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8856b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf5gJkgA22sSGgNlveHud_VK3H--7X2KqBG1oDIxg0Dw:37f4212ef7ffc9d0e1ab0de38c201d57\"\r\nlast-modified: Wed, 13 Aug 2025 15:49:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":3180,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/h q=0 n=3+0 c=0+1 v=2026.4.4 l=982 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BUqaj%2Bdlgvj3pFFF%2FMjg%2B0K35Uw5Yrztpadt7kqJKglhkZFRwINYmIk9zHk8KJ6Oza1lIOtYEJeRQVpjZJ4iy%2F3P5h7GSaNqJbHd5%2BZ7NfxnKAt4R5MFWIiaZ5RBpSHyYI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54d934e46ba3f83757e3fc46436a98ed","sha1":"4a688f5f9c590b0548e7d656fbf087c428441183","sha256":"2f622009605a29434fb16cdd7856351fb750f1f4b0476375a576fc41931a7004","sha512":"4211b363ef6726077a499dcfa98473f58358fd878d90d84730d49f655ca6d7c7a6f25f87a3b675077225d8d44584e5b636a9c876db9d76240cda215d4cae6ae8","ssdeep":"","tlshash":"561194c4a4f01d6ded65fcb260c577ad1bc4d35941e03de2464999318ab78a0b7bcd0a","first_seen":"2026-04-30T10:35:06.622653Z","last_seen":"2026-04-30T10:42:40.634914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/avalanche-2.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/avalanche-2.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 914\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9256b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfa6fEzYsa5Ny0AvXWm2CcgTaB--7X2KqBG1oDIxg0Dw:8228c9428aaca08e1a5d49c8d2be0b41\"\r\nlast-modified: Sun, 28 Sep 2025 19:44:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":10749,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=53+0 c=0+1 v=2026.4.4 l=914 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fltt2%2F%2BzSzWgBLQMpiaghXbqYg7aUh8aDg%2Bq5vawjD6Z1XL%2BxZYzusbw8dFXdZJtBCfNCcGtQSIrEB0N1KJuLTjF02XEisr5MWMva02YxImAkkQV4%2FLIDAIYwtAha6QqAsI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a34f230f8a618bfd6c5a25012e65c54","sha1":"39b27203b2f7baa5c68af7e992d297283610b70c","sha256":"ef1042f2ec734c85c9cc8175724f1b1c56955409e6823e98bd66cbb2cc4a61cd","sha512":"f4825adc7632d478a0835b398bcdc2feede6a3f848e418beaebbfdb3a1698933658430b2d7e62e98b0c69d7ebb176fd706967a41adb0e5bf886e554599a16ce0","ssdeep":"","tlshash":"c211b3725d6ca527d10ac23818fe3ae37800ef486b0cc5642bac8c2f64bd1474814391","first_seen":"2026-04-30T10:35:06.623493Z","last_seen":"2026-04-30T10:42:40.608175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/cardano.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/cardano.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 14590\r\naccept-ranges: bytes\r\netag: \"fa0c0c9623b0e9ac73d1327659cbe5df\"\r\nlast-modified: Wed, 29 Oct 2025 12:14:26 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fybc8WW%2BznEe9PTM2E%2FJxZvqAhgVSJpw4%2BoLNz7pH%2FRM%2FXDEKCAbCEPchKmTr78RsI6A6yYsn%2FeRh0XvZLDf8WhQ68vQxgphYvmfB21qy1sFU431QZhoA0L60upPAfakiHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98b56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"fa0c0c9623b0e9ac73d1327659cbe5df","sha1":"4d62e8e7ff47d60318cef8d2ca15c51a1cc5f341","sha256":"e4234da8fdd95489dc70b5912af09a79a30aebe5d20d76492b445623ad797c26","sha512":"bd43b094fb137ca100355b0f151bbf2818ed1d1d1205437bdcd93d5ba4b4ca4be5516a1061ff9fdf9d97406ae768e478a97c94d33f3730ec3d53cd4c45532012","ssdeep":"192:zFlcIgChb+ryi0JzIb69oGC+LnV0a+Hn0mhj36nVIioe4++/fZ5trCdC8IcvkAld:/wyOm9oD+LniarIpLrCdCgld","tlshash":"3e62d0ee5616f438d128b347c41562d9ae0b6acce6156dbe660d303efe69812312b884","first_seen":"2026-04-30T10:35:06.624201Z","last_seen":"2026-04-30T10:42:40.691465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/vechain.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/vechain.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 896\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8356b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfN9OELAAtbXV91DbjQQ2ykoNF--7X2KqBG1oDIxg0Dw:eb6fc9ee0c75fe88e47386a4c35515c8\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":2378,\"original_pixel_width\":250,\"original_pixel_height\":229,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/h q=0 n=6+0 c=0+1 v=2026.4.4 l=896 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BQdYVv0ykrp8c2M2lJw4%2BhvHYt%2Bfu8Wfy5JmM5Dr2reawZY1fFNAd0ayjHI9SCe5vhrRLJTq7wv17aodNMfg8ZyCt7%2BwVYKulwPNHo6WS%2B26%2BqjGq0YhHFyAwZItCFo2Lk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9496f6b082045e6c0e7888cc15ff709b","sha1":"d43d997e1d0390ebdeb2111eac3cbd7e42548066","sha256":"21eab374ef649d8d3b85555b1ac1bbaad358287ff3102c24401cddbb59f9bafb","sha512":"d1f5bd9ccfab17599498c24eb0527c0286174f49331fb7773846a3c5b643de00209b7e26d18d762da64ce52c2c29f8882844050cf6dbc51206926cc884afcfd6","ssdeep":"","tlshash":"ce11676227f82cbdd939393d027483e181d2ec416f40df55c2220fa0930d07958ea6b1","first_seen":"2026-04-30T10:35:06.62518Z","last_seen":"2026-04-30T10:42:40.596577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/UPwpXNpCXcpZnJYqVztU6xFcI7bucGxYilGQNkvo.jpg","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/images/og-spaces/UPwpXNpCXcpZnJYqVztU6xFcI7bucGxYilGQNkvo.jpg HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 366\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9756b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfVnOapTtpfGsZqURpLY3CG-LhE0dYBfgcm2j4njn3Dw:06ff610a3282d4e710c4c9ff48e94554\"\r\nlast-modified: Thu, 29 Jan 2026 21:08:18 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":325707,\"original_pixel_width\":1801,\"original_pixel_height\":982,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/h q=0 n=7+0 c=3+0 v=2026.4.4 l=366 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pz%2FkpUW8J6UUt12z8TekYAKy%2B3fQHc6gixwiEtLKM%2FCjjA3OU%2Bio1TyFk63w9I5ZepcGthBfTbZb5lpOdr2AcPf4ZZVSCbmg4uqFJMLki%2BZG4kRzpStCG863cNLzegwivoA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a8a340b92efc92436582bae40b2e557","sha1":"83d8b1d9621ce9c5fcb88086e0e9161ec264d09c","sha256":"377b62019bfdc817c79e87d28ff0bca4010dc31cbaa4820f150a6238a3ca3e25","sha512":"246955a645aa41748c82a4cd39fdbc6bb45f6d04b5bd8eecf5464cc83ef359dc49da6fd03de4ca05c4685e5cd58108d32df957e4fc21c3277a0791cd515b8daa","ssdeep":"","tlshash":"b0e0606a0393f40af28a389383a1d2d432f19dc008a057849a2907810cccc57db7ba26","first_seen":"2026-04-30T10:35:06.626091Z","last_seen":"2026-04-30T10:42:40.630116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/plugins/datatables/datatables.bundle.css","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/plugins/datatables/datatables.bundle.css HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-4cf7\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8gO3J6sRuTD0tLa8AQECSTgUd5POysXZUT8qwNZbR5o%2FSlD8wHzrEGb1VTm3BPhLGe3qmSWdMKQ80gzcZ5hml9gWL6SjIpnCCsmVAKUIPn9lzWd7yosRXx4St9LaQ%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5058ce956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19703,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (14436)","md5":"f0d92266522419d087daf9cfa5548035","sha1":"652f517b003f660ef581fc7163850dd21629a68d","sha256":"e09c415c34bb9f0fd050010a68a2760c57b43c3207453f23bf20e8e49895abb2","sha512":"2fc8b75964f32070e8a85705e985bf16bd220bc21194deb86ff6303e53c87fca3a54b136adefbbe38d816c41852325af9aa62a2ba52f0c9a4f6714e7fab37f99","ssdeep":"192:yBNVy6codxztJz9zRJzFztzXz5z9zSzQzmzu7OAKwPJAfz0TT4zPaXfKKJSOJ7+7:yFh6i2FtkSFPfr8vMBh97T","tlshash":"4992aa90b76272025262cde2a1cc3d6869347481fde91cbe7c49c6be4b45d13ebb8d32","first_seen":"2026-03-22T05:05:30.582852Z","last_seen":"2026-05-06T15:31:03.078173Z","times_seen":9,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/stader.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/stader.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 486\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8d56b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cff_yYEIWh1cjRNLYhBVExrNQpE0dYBfgcm2j4njn3Dw:28beae61d3e9b797b8fd176cd40ad8a9\"\r\nlast-modified: Wed, 13 Aug 2025 15:53:03 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":4178,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/m q=0 n=125+0 c=0+1 v=2026.4.4 l=486 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGatdIiUFZ9ZZb4P2LDWSmMdzuA6W4A7hlDMBgw35xyEWLATEaVKNl2PDHOg5QsoIbRlCrQCMpRFNsdsQd5z05eN%2FASGtByjxOlv%2F%2BUuKMOYRC%2Bh4DVVjm8b1vrgZ8bWidc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b88ad376c95e5f85b56ad3cfe63dd690","sha1":"66928a143e1673857cfc1133bba86160e06c9e07","sha256":"4bd190683a6751e89bcdf4d43d6f38e0e63e1b668b60394dcdcded08065c5e71","sha512":"3bef4ce59b25121433ad65721f506c8b1fe9586c7e4395ae1a14d34cf281881bd9dba72f69c3e2c328c6a942e36902270127ff072678a154b720f81dd1c6a64f","ssdeep":"","tlshash":"29f0971a02f31163835aaeaaaeec5302307bd3e7ef2615c2a14289a138587e45262249","first_seen":"2026-04-30T10:35:06.628037Z","last_seen":"2026-04-30T10:42:40.682832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/solana.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/solana.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 758\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8156b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfBbUpSGqoTWrNjJE3ThWM39gf--7X2KqBG1oDIxg0Dw:0f85cda93631518b55ce6b258faa41f2\"\r\nlast-modified: Wed, 13 Aug 2025 15:52:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":6163,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=53+0 c=0+1 v=2026.4.4 l=758 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nc1n24sVfdZ06oFyfLnWtQzHjglcqP9Xf7nlSGFzVVAVJeN0ADFWcxfSrnnSwfer5mZ5VXoTOTrKeHulCO2KixXtMc0oeGrtTPk6FJpEvskbxcw7DBqjkIk%2FnE2vux9xnIc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":758,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f7b53cdb9f6eae619a664b92f63eab66","sha1":"a2efa540b4cc0db1b2b77064aec454057c31a5cf","sha256":"e3c061c066c04120a2e5f1bee7689797a2957bb8078a1c23b8d1e989e274bc85","sha512":"463fa48fb1464183372e13c9d93a12d9bfdf1b5a574d8e73ddc58512a1fdd50233438fa16fc8f9b3c65da8e79445f63176135672fb667a1e81fe7d9804016eaa","ssdeep":"","tlshash":"5901b5127f1f60b0fe0d5cd830d6ad6763498a6e6c9262a2008aac2d46c4730b312c21","first_seen":"2026-04-30T10:35:06.629058Z","last_seen":"2026-04-30T10:42:40.648555Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/js/backtotop.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/js/backtotop.js HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-510\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csVsJDL7v1YfKrXdi0Y9WmOraIqyx%2FSKlCCSLWvFgPQordKc18nt8VRvXtN47tbwmV047W8m5NPNMlMAyTAVwX9suoZbKbZ1%2BvJIPDtBez0TgVSwoUIj5%2FzSJnMQTg%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5066de856b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1296,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"330b018d04781d1ff2dbfefc086c827d","sha1":"0a5dcd2e5fc9d9e0006e6606b684921ed32f59f3","sha256":"8d72c00546e10b72173c8f8239b62cb988edbdc4cbcfb4413ab1a162e1d33de3","sha512":"6d97fa73ba8314bb7e40030aa31f51741e0e0289c4ee1ab71d95180fb6b87a52ea109d7fa9e6b362731cd4551045ad1784a9963b55eb3888973f22d3ba9e4b94","ssdeep":"","tlshash":"a52168b4a245223206cf56966776b3d83734606ba3537a827c4e83c15f51fb88824bde","first_seen":"2026-04-30T10:35:06.629825Z","last_seen":"2026-04-30T10:42:40.6423Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/plugins/datatables/datatables.bundle.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/plugins/datatables/datatables.bundle.js HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-1dade\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dr3d6eJ5kPZ8SxUj4EJ7URZVsDEgTPM52iLDHiBAeh2rJG%2FC6dW5XyylJHrfZ728SfpwyjNT7KFvSGeMi9EVSnDwJV3V9tIQSX50PWQyG9IBnQKUTxbf%2BT6ND6M1pw%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5066deb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"625d44c0248188b9fc51d60b827f51ca","sha1":"c4a88ba5768397912c29256de41ce11ec5083256","sha256":"ebb8c9748a3617c1b2f1e70198dbef4666d200085a3fad1fa588ca10b201d3c8","sha512":"5874e5b75a2aea86550cd7c7fdbf76c6718eabaf4a3052d1cbe8c6187152f31affda9bbbd6745b4b3b02cb114fd11f7f84e4178a730865ff159ccbaed16d8384","ssdeep":"1536:cf58ksPrWo6RyMnHgkI7AmQgJQuh2o7ZLIDr0RoPKQW+gCeupX1GkTJSBj:k5gORjHgkIRHJao7Z82QDpFGkT2j","tlshash":"01c32ad87b8475a883bb70e0006f550ff13b2956d84cc414b22ad4ea2dbae4951bbf7d","first_seen":"2026-04-30T10:35:06.63063Z","last_seen":"2026-04-30T10:42:40.640613Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:34.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/0b8fb825cb67/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f45e50bfc4e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25443,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VM43RWN4E8","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:35.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-VM43RWN4E8 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 30 Apr 2026 10:34:35 GMT\r\nexpires: Thu, 30 Apr 2026 10:34:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156026\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471895,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7828)","md5":"b00003ef8b9986a284616e4e1d024a78","sha1":"024872cd0457b6562d7ca6f7ea944386e398b87e","sha256":"3b04242b2e625cff3e61a70e63ae40c9e7b8e75c432ef3f35a41fcfe7d859a72","sha512":"7321762789685567c531ac71fb0fe6723587a3798a17d63059be83d8a0852a4e7353919379d3ba6c533af176c6adaff6b4fc0a84fc0730560f68d2f668abda0c","ssdeep":"6144:7EjJ7mx/Em6PBBlXdoR5dLU7dG7BPKo7NFU1e34rRw:U7s6PBHCR5dzmw","tlshash":"72a4f9ceb3d674625396f478903f01cba57b28a2b448c89af189cce42d7469a4177f7c","first_seen":"2026-04-30T10:35:06.63155Z","last_seen":"2026-04-30T10:42:40.643934Z","times_seen":2,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/assets/vendor/jquery.min.js","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /assets/vendor/jquery.min.js HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\nvary: Accept-Encoding\r\netag: \"69a0f3fd-155ed\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6wL9r%2BA5C03JEpnex90mOtYBCr4qqVmiirjP3l7TimGm4CDh5bydUxQeeufVZ4JVjtHHYBRsJbHUGNh2U0vBkqhmT60kUL1hsPFgOxvm2gMQA9M0ULjaLJLUUOaoQ%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5056cd456b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-11T15:57:43.336701Z","times_seen":154145,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/OwlCarousel2/2.3.4/assets/owl.theme.default.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 331\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03cf0-3f5\"\r\nlast-modified: Mon, 04 May 2020 16:04:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 598397\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdtqBvCn4VVrqg%2BaweFzPpAXi12UEo9OKnP8CQwcFI8ltdzmXvF1IFDUQGxPr1ZFWYFPhyrmU%2F32q3scApG2%2Bxg%2FfAINe%2B7X8faLG%2BNL3mXSIfyLvT4H%2BFijsHxBco9bxKKJ5oXj\"}]}\r\ncf-ray: 9f45e505e8acb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (846)","md5":"594b81805a98b267e47c70a8fad30d9f","sha1":"684d84ec40b305ca14efc88c91f12972cb6342b4","sha256":"924b0dc630d1c5dff9fa31aead9509775b1d476bfe0a5ac2977b2f11205a26ac","sha512":"b0c5ed30d2f5cd1ce894760a12e8ccd80a822d447d1760b8ff4e5c75bc638cb491bcc40872210f090668fbe9e4ee0a3706d4ae2bd91f6bfb3e6b87f88b9a4b93","ssdeep":"","tlshash":"4d11abc5f189221d301781904aa842cb6b1e687e529d0ef5f8ee8160c22dd053a6fbf9","first_seen":"2023-04-05T06:03:14Z","last_seen":"2026-05-11T15:13:25.707212Z","times_seen":21677,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":48,"dns":4,"connect":4,"send":0,"wait":10,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/bitcoin.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/bitcoin.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1072\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9956b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfe8wWRncWkta9btEfeQMDaRsc--7X2KqBG1oDIxg0Dw:565e8c524f6da22928811f836d0b92a2\"\r\nlast-modified: Sun, 28 Sep 2025 20:00:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":12242,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ram/- q=0 n=0+0 c=0+0 v=2026.4.4 l=1072 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3gJcbjoCZAGfo669SsWvN9Ss1D36GG9Qv6GSCfHJ23UqpaQEJkkJDdBMEruXCwQ44U7PY1xYXTLnA1lM6ho5Y5Ce5l60Z77wtRHZV1hLsca16pqcc6%2B0NsdMP56JlppyIf8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1072,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35332c8062828f24014eaa052836fb6a","sha1":"f28f7c31d744c515da7efc0eca08164e8535211e","sha256":"8f1fa3ac5de2171e69399bc4139b1146740021ea1f6571d51973dbb7f6dd2db9","sha512":"ddb08ec3104dcceeb360de3c080d891f4ca0405738b34dfbbcefe75bde0284b10003505cb6d3ac548fcd47da49275c911b7010d4a25f701d140dd72b0c78a349","ssdeep":"","tlshash":"c811e938a7ae142fc2aa2db3fc6d972672595054fa78536ed675c5d08c0a3510530ffc","first_seen":"2026-04-30T10:35:06.633524Z","last_seen":"2026-04-30T10:42:40.599236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/cdn-cgi/rum?","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:35.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\ncontent-type: application/json\r\nContent-Length: 639\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VM43RWN4E8=GS2.1.s1777545274$o1$g0$t1777545274$j60$l0$h0$dujeiSsQlqKWFQdHtqr8Ng0_OmgqF68Nd6A; _ga=GA1.1.438024080.1777545275; cf_clearance=NUEDHDMNB8bVZaH2McEks1ozTxh9mB1o2qH6h5AekgM-1777545275-1.2.1.1-LtsfIsGEfeDiqljjOX86hVV8eprZk6fEbynNOQSNYQJUgdZipE1dbO6FGCRuLyqE3Zg9YqBF2TiLQxHA4z08XtfF9vKWB4KKjmELg6onPKy2IYgAUStyAPanTxmcFEllYS8A3YVEGydsYJvQ0Ucjntgm.E8jEUstVvS_ZgUeuxV9EVX96EWFMmaROcM4OuRupV8_Dgeq.IByQkaetoGWBy7mujs.KsO7Y5f9F7JIUqsaceD_SP5eCKvggntrb1Cls.Bv3M1BPbXXlClhOqkEsvWm9sDlodRGbEQg7SWuPGRRtPgIbbjzJ0.J4.GOyd4M9g09wO0l0viYAIGyV7C70g; XSRF-TOKEN=eyJpdiI6ImJiOHVaaUtoU2VZejVYUEV0bGhJcUE9PSIsInZhbHVlIjoiN3Y5RTZVYjZkTERhTmVXbnhPU1FZVGs3TnloVFpNRkJ4STJmS1BiY25EdmZUYjJRdlRHNXhZYmpIV2psWG0xdVMrMzFvaG5jTnZDNTF1aG1iUjN6N3NXR1c0NVRBcERKOXdtM01YdDJJWTRmNXRHNGphVXExZ3d4VG0zS3ZjUnciLCJtYWMiOiJkMTllYzgwYmIxNGM3ODBlYWQzNTc1OWVhYzg5ZGFkODM1OTE2YzM4Yjg4NmNiODE1ZGE2ZDI2NWM0NjVjNWQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlY0cWVUMG1JSGg3alNRZnp2djVjYlE9PSIsInZhbHVlIjoiMzBlUm9LWXB1SnJQMFJraWtERzRhWHNTVnZ6NnZnVTlPTUJMQ3NVSFMzK0l4RlJvNDdjbVdKMjJaL2RvbnR4UHZLK3E4cDF3S094U2dlUXhHOStOTldMdTlIN3N3ZFRLR2NVdnZrNWFHbnVxa1E3QnhKcFBSZTJzeFJISW1YSHEiLCJtYWMiOiIxZjZkOGUzYjE1MDc3MDZlNTQwNmMxOWFhNjQ2ZDYzYzVmZDViMjkzYzJjOWIyOWE5YjRkMjIwN2M2MzhlY2NlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":639,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":696,\"startTime\":1777545272810,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.2.0\",\"timings\":2},\"pageloadId\":\"db716cc7-f3e1-491b-aa26-8ff140e1a33a\",\"location\":\"https://ogaudit.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":28,\"domainLookupEnd\":58,\"connectStart\":58,\"connectEnd\":77,\"requestStart\":77,\"responseStart\":144,\"responseEnd\":176,\"domInteractive\":1072,\"domComplete\":2398,\"loadEventStart\":2398,\"loadEventEnd\":2401,\"transferSize\":87664,\"decodedBodySize\":1035695},\"siteToken\":\"abdefaf25a944b0c9d21512e3ffc7e46\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Thu, 30 Apr 2026 10:34:35 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://ogaudit.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2BzfuyGLGZsIQ9hceT14DXRprMmGdZc4zJPUQGSXS3O%2Bt7bwfdzCUVf8r5NVqpCIr68m41vb3GxSNOh02iuIlM2hvrWpq13tiVd%2BG7gq7E%2FUt%2B5sDu6XX5SMS3NbpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f45e5147dcb56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-11T16:03:02.259001Z","times_seen":15014758,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.6.0/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 118072\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"6696a8d8-1cd38\"\r\nlast-modified: Tue, 16 Jul 2024 17:07:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1752732\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xh4BoR2JIqwtTG1QpVQSnKsx%2Bgi%2BNkTLJaJ3mdfikpB0aFJMRArw%2FHUcNh12ervJ8AlKhDnV9A1YKdj7lRyzcusFuOUzDfpbzsZpFhPD09gNPnAD%2BmKKBGL7aKrYgLBgm4IVuxMp\"}]}\r\ncf-ray: 9f45e505e8afb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118072,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 118072, version 774.256","md5":"715d593456fa02fe72a008a72398f5be","sha1":"e948290773216dc1b50c2121314a8cf918c22b54","sha256":"c411f11975d26eb04cd2aa3c071181d4b18e489f1fb97060d4176a3531dfb36e","sha512":"1f63209c93a462c2690442c9cf1c3e5a67f2df7a67dfcda2cb81292a2dbb90641aa0ab81c25323a1f2d9f0fa09b3421d136ae5228c47e581c51912ba284de46e","ssdeep":"3072:3wqMZaMDlYfb+t0YI4WlLL7rE2ZjX+B+pdJpimtm:gpZNYfytUxH7rnZj+Szpiz","tlshash":"71b3137922e526408e9d0e3bbf7b6a6ec7f8719ddbd4c10aa7d18469001738ed8d842c","first_seen":"2024-07-20T13:53:50Z","last_seen":"2026-05-11T14:24:00.614032Z","times_seen":8948,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":63,"dns":21,"connect":4,"send":0,"wait":9,"receive":3,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/ethereum.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/ethereum.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 13114\r\naccept-ranges: bytes\r\netag: \"af87366546180c799987073ac53f0733\"\r\nlast-modified: Mon, 29 Sep 2025 15:07:28 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHxTIz7Ezw6DcwGvYF%2FWJSh47ZOWILMl0O4PxUq%2BVAJtyG4%2FUs776pvbJHs54Bb0XqPHw7BdhaH5YZxGL97XAH%2B0ienYmdWVgzNoYau38ukUQQthRJ90s%2F8SqPx2k5T1T78%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97956b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"af87366546180c799987073ac53f0733","sha1":"184c444a964020e531cb72b9c5e3017e411d5185","sha256":"d90e937d915ab0c865ff6e335361386c56524d4d33fb66f2f04defe1500082eb","sha512":"01d259380cb9b000fafe13cd736aa34b2f73d4e5ab8927d44347a33f4168914cd97d10bda83ffbcd5da4c4c90f7bd9acb90026c7f6c0cd3f73c634ba697cb106","ssdeep":"192:htyirrPkRdnpyRa5GKLC4XCLAJRwwTCW2BwLVrCu3O1AFkNsJgvl8qiY0x:7xrPkX5Gt4XCLAPjIB67YRvTiX","tlshash":"3342afb7dc26c34e0440984c756c7bb5ac6abe6ccc4bfe7127f5b46db86418e7644089","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-05-03T08:41:49.10021Z","times_seen":891,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/trusta-ai.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/trusta-ai.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8c56b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf11dIwEb017sT1tsVRoepjwg1E0dYBfgcm2j4njn3Dw:b306ace3e7daf72ba92b1b51d5780a69\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:02 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":15751,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=71+0 c=0+0 v=2026.4.4 l=350 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7Uhaw7wJi8tDJaHTtisoecx7NeREBLJCAw7sZmceInAnkJRVjLbZ1yOCTH32p4wfmRtAgFtjrSXr%2FiFqFNK4afPM7Qqf2snG3gONkk0jB0bQhkudR3L07rnuPPS6%2BwEh2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76da116b7b48ee3cccfd95af77fadba3","sha1":"35fd5a2d1ed37116a291ea509ddf18ec6cc2d779","sha256":"f11cd0726d791a50cbe6e25287a49605bf68be671a456c13ab5849b036aef31c","sha512":"86c074c147d5184f690594d15f65e2ce27b1e360e6233258d70519ebadc41b8f433dc5df419567a66d193e6b49036d50f71ec32ed8573bf00a7d1496611addb9","ssdeep":"","tlshash":"57e0c00253157e1e4fa5191cf49e2b858d93b1814120d8d8a307b8e55a6d10a21c3b9c","first_seen":"2026-04-30T10:35:06.635687Z","last_seen":"2026-04-30T10:42:40.638805Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/whitebit.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/whitebit.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6372\r\naccept-ranges: bytes\r\netag: \"272e32dcdaf2f6ba5f2b3dcef8a4e694\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:29 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRWQm%2Fs2W34c4zzxVYqo57%2F3QpoeYWhI%2FcfaQFoz3agsSbGd1inc4DnDvF%2FAh95GVwXxsotbiU7m7PM8SxMHbj%2Fq1%2Fq86cN2XA6qNEO00LOI3XPn4lY9UnHbrYQMU4cIp0Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98656b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"272e32dcdaf2f6ba5f2b3dcef8a4e694","sha1":"d011490328565ecb0191921889fe9fb63cf7d59f","sha256":"f3f34b5d1a00b3f03d73b21f73f9f3c8e1d0e17f34d8e13735882422d3368160","sha512":"bd7e5a269bd08f5f991eae1ebe80a35758fb6226cfdd15756dbcc83eece7d310673594d5d5ce3c96c0acdb0bbe57ef230816278f88ea8a5a8c49bcae0680f691","ssdeep":"192:eYRy641+wEZKbqFWm+ad1b9jcVTAvFDq8:RspZad1bNcCdO8","tlshash":"e6d18d5e7787963f2404352af4674c7f1bfb141893b2e07d6866ede53817e2a0380899","first_seen":"2026-04-30T10:35:06.636662Z","last_seen":"2026-04-30T10:42:40.608791Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/favicon-512x512.png","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:34.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /favicon-512x512.png HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 21519\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Feb 2026 01:31:41 GMT\r\netag: \"69a0f3fd-540f\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: no-store\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1f9fwZk3FGfL2tFO5282eWWY1rK7ANZztIzHzELrChH8rccutRJPfdJyirlvwYCMdRuPaKIaH64z3xvE%2BVwvjUlsE6yqi6GOsFmf%2BvBtX6%2FRSN6qMknEmeSOX8XZpw%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e50bbc0f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"3b23442d8b788ecdd491296fd1348868","sha1":"d1182e541e13e7514bba5429bc05fc581c74488b","sha256":"4e12490cef6978ae623c78059fc524ba8ecbc65729180e5b2a15e1bfbd130994","sha512":"70473372999b24ac885755a3dbb90dfce883f7ba9ffa1d7c793413188231326a5a90e081b14b1136385556088409eab9238b5b1283e9860578c3ed70f23eadd8","ssdeep":"384:SNcB0O0Q07W7fwrEB1cJ4nSN5cJMMvsa8rRqfotC6OUjLDQrBrBrBrBrBrv:SA3GW7YrEBSHN2exa8rRqf5SgFFFFFv","tlshash":"8da2ae4364c24d69c9bd041275e72845c97bc42c6fbbe7b26c4b4382e6fcedab261351","first_seen":"2026-04-30T10:35:06.637596Z","last_seen":"2026-04-30T10:42:40.633079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/morpheusai.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/morpheusai.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 260\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d9b56b4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf80mQD9e55Ayz8yaylIQvHoG_E0dYBfgcm2j4njn3Dw:f4dfcd7a0e5003c24408530fd758f011\"\r\nlast-modified: Wed, 13 Aug 2025 15:49:56 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":18667,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=45+0 c=0+0 v=2026.4.4 l=260 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChrlMHv6TeoHpkkd5MItBz%2FpN7ccD2lBAQQaRBQQa0zscr0thi%2Fn7P4PY4xFFZRGB%2FfAM3wZ1Inf1zYZ5OdITdv041wyxH5IkhhkerCeWbtv5DJNx7cUqHcGmch94omGUQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ad21c13f3da7bd086ad68ccbd4e3061","sha1":"e0ae527698630d4fcf88dfaa0d268f47e5761726","sha256":"098bc1798fb0b5a0d2ba0671e880235d1e977b385cc2faefed2722a9c95d2a78","sha512":"8944f232abaa8a2d6289ba15130bbd0b4f31fde25a0ac4954d2194c34098e6dc97122c6d909a567b22ee5f68fdc3aaf7d58e4fe9b52f43431f385d53cc392090","ssdeep":"","tlshash":"bcd095808a2044dbc8979cd778740b70f8e85fdd4c5981cdf313d474d06a180d103774","first_seen":"2026-04-30T10:35:06.64011Z","last_seen":"2026-04-30T10:42:40.683667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ogaudit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\nage: 2881698\r\nx-served-by: cache-fra-etou8220126-FRA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-05-11T14:33:20.539966Z","times_seen":24771,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":12,"connect":32,"send":0,"wait":27,"receive":9,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.6.0/ScrollTrigger.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/gsap/3.6.0/ScrollTrigger.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 8179\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ffd3ef5-502e\"\r\nlast-modified: Tue, 12 Jan 2021 06:17:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 708144\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmoyzSEcMyoC1fnkOkqak%2BpL5Gkz0XjBs67eO41C51e9TRsZtS0NQvHeZDh46Z3a%2FVgb9z47LlzL23HIfSl%2FpiD7sFaerN6h1dqcsC6Oy77RxBFtJg%2FoExjhXlMW2jABVLvZGdSe\"}]}\r\ncf-ray: 9f45e50658e5712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20526,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20220)","md5":"1d9ad783c6b71f231b35a7a67bb5e3cb","sha1":"683efd2d286f21e2ecf6316ea21bda6a048f9afc","sha256":"937e40ef42d7e8aa3e1c4c7506fd9a02196db49ba8c776fdaca2fde09718540d","sha512":"41c626d6aed16e75e6c18ec72741fbf77f084b431a9533d8a86505d1f230420123301b76b6a8c306df91e48fa9a5dc04a218cc7479c55341fe4719ab190f2a72","ssdeep":"384:5C8gU+iKBsUqGn3gq5oKLQBhv6duXAM2K3Q8Icre5bfQ+laLoLRQJd:8wpG3zyKstAE3QmrUbf1laLT","tlshash":"a792f8cd3345b42367ef6276d06f110ab23a14992d1e01a4f224a4e07d796bc963ff9d","first_seen":"2023-03-07T13:55:38Z","last_seen":"2026-05-11T03:53:41.149025Z","times_seen":150,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/leo-token.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/leo-token.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 12585\r\naccept-ranges: bytes\r\netag: \"378b39eaaff68ab0fe95733b9657697a\"\r\nlast-modified: Wed, 13 Aug 2025 15:48:48 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzUvlbfKbDPSMVT7WFzj0T%2BZgDRPridRQlTBdWLLdRpBKb1fChFmKHFSH1Uctn3QajrhdhJNR5Mdjpe9ODjYii5hyeiOgYOZertNjzKdwo%2FPqPykIqwDS3VcBKY5wvReZhQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98856b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"378b39eaaff68ab0fe95733b9657697a","sha1":"fb296ae2232e2eb421439c249e3c6ccff554372c","sha256":"e8942436935479f43b21cab247ff5d42771da80c8161e0825e800bdb00da002f","sha512":"e3e000992450f40cd0f1ad853662eb9e8c17f65488da6037b840a8b6a2bdd9edd88a0a4400432227a6dbb9b376d77483e96001bbbcf4139e166229ca7b64db93","ssdeep":"384:dIcasaq57LMVcAdtRh+5+7h81CLmy3Ax7y:dIXSXMVHdfhp7h81CJK7y","tlshash":"3242bf1af9cc892dafb035a7cd2113558c8e042598ae9eb7c269bf2d938053357b760c","first_seen":"2026-04-30T10:35:06.642097Z","last_seen":"2026-04-30T10:42:40.643367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/ethereum.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=48,height=48,fit=cover,quality=85,format=webp/coins/ethereum.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 630\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8556b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cfoZ__nJUHx7NPVNZS3qbTrHe6--7X2KqBG1oDIxg0Dw:af87366546180c799987073ac53f0733\"\r\nlast-modified: Mon, 29 Sep 2025 15:07:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":13114,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":48,\"pixel_height\":48,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":48,\\\"quality\\\":85,\\\"width\\\":48}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/h q=0 n=43+0 c=0+3 v=2026.4.4 l=630 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9BK1Qo60Bi3G2KfIE1pA8w1KmTLuq6EdlfECC4K578YkEVt1s9IDa3ppGemuHIo4YHNHSzY6TyyCuCh05JhKnltxrM4FTEBPXywM5YWjRVsRmnLgLEc4NXCWAf1uMzFZOk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"39550962290a8e7cb57b2df3c53aab3f","sha1":"fa03383dbf882fe412506c326ef8ad9f294eeaad","sha256":"5c38d9c5d7e1ec1b0275f58cc6fb59ad55ae07dad4a5e405d7345458b44efeff","sha512":"75957aa0ba044e419ed2ca3f2330af2c62bb545962a867ea7144668a62423e5bd98d2b97d151bc1a0faec1e39afb5120570409fdb59dc5d7f1e3013527b6fb3d","ssdeep":"","tlshash":"89f0020d0320de57d319947afab97d241418d2c318e8d8a3786f75e395243e67e7ee40","first_seen":"2026-04-30T10:35:06.642989Z","last_seen":"2026-04-30T10:42:40.656813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/usds.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/usds.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 16267\r\naccept-ranges: bytes\r\netag: \"d66a73ba1e269670e9e76a1f99eca779\"\r\nlast-modified: Wed, 13 Aug 2025 15:54:13 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2BM7MJYDPAZHcn%2BjfiITpYRDjxp15Y%2FCZa31NeS6hMhmwsWNcU5Z6ZVCAzqyZzfMg8jzrr9MsFmSgVDieyhER4CTUG9KWPWHrmBbVD8gzSh1dkAIlCx3EuKwNK2ndHcoecY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c98756b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"d66a73ba1e269670e9e76a1f99eca779","sha1":"565f74356813f95dd217c0f23ca82fa457780e7e","sha256":"cefb5645442a2a8af74300a03651192ff252a9bdd7fc4cd7d8bf30f7043ed5a2","sha512":"b8a732d14098ec3b5ad4394b4bd1d589ddfe0ea096e7bbff01986fc35ba311a2df62ddcee36d84fdb02e0359d88770fea4fa00fb22306b13a0ebb373c7368f1c","ssdeep":"384:YyRv48uyMmchfcclO3zeBp5RyyQeiY36HeWJbyay+lDwoi3:JM0qnMOuHeWJFXU1","tlshash":"4e72e12f5d82c1aff776d908a018ddef4d49984d8e98f01367a1640f1cf078169a5bfa","first_seen":"2026-04-30T10:35:06.643798Z","last_seen":"2026-04-30T10:42:40.628884Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/fancybox/3.5.7/jquery.fancybox.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/fancybox/3.5.7/jquery.fancybox.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2695\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e58-31fb\"\r\nlast-modified: Mon, 04 May 2020 16:10:00 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 878596\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKqMpEVOaMdoO7eQtCu4hVUm7uAb2QNXYEkyKtEEmzv9BrPguUqyKX5JlboD0CEj%2FqZCBmFxZgJHWBEEUSmwWGC%2FcUFjoDS6QS5FWEYtX3Zp85VgzMlz%2F09vz2mIaYEBBlR7SQwC\"}]}\r\ncf-ray: 9f45e50628bd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12795), with no line terminators","md5":"a2d42584292f64c5827e8b67b1b38726","sha1":"1be9b79be02a1cfc5d96c4a5e0feb8f472babd95","sha256":"5736e3eec0c34bfc288854b7b8d2a8f1e22e9e2e7dae3c8d1ad5dfb2d4734ad0","sha512":"1fd8eb6628a8a5476c2e983de00df7dc47ee9a0501a4ef4c75bc52b5d7884e8f8a10831a35f1cdbf0ca38c325bf8444f6914ba0e9c9194a6ef3d46ac348b51cb","ssdeep":"192:kJ6DcTZ6oCCkC/wEvcqtZ02/Aw1vGgjnUQcw:kJKwll/wEvcV2/vvGkjf","tlshash":"af425173a140312c407bce22d7cfe948e13a9555aa2216fbe95cfd64cbc7be811d62c5","first_seen":"2023-04-05T04:45:32Z","last_seen":"2026-05-11T15:46:49.048797Z","times_seen":41836,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":62,"dns":11,"connect":6,"send":0,"wait":10,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/ripple.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/ripple.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 3392\r\naccept-ranges: bytes\r\netag: \"966b1017012d47e58b2e45eeef4fd6ad\"\r\nlast-modified: Wed, 13 Aug 2025 15:51:59 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DJrI9AZgw8spDB85cAzNl0zGO%2F035ajze7IGpKAegBKnfW3oz2eIo2Kq05aw6KW6D0i57KTm5l%2BCQXw%2BPJbtxDUFBnMiCFJtvNH%2FvHhQSUX%2F%2BEL66pa%2BKaqS9WCVoV641Do%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97c56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit colormap, non-interlaced","md5":"966b1017012d47e58b2e45eeef4fd6ad","sha1":"c1499df805a41c5d7531008eef5eaecc127b40cb","sha256":"571aaca7260e39dadc16da811f919f13ad42107764a873bc8e23b225c1bc3251","sha512":"ee8baaa697721cf7307e16c6591500e992e2a506941e39a300ae007d3764ae5f20d24c50f4853e54329f1f6abad31e7b10c5f77c162cf96b966763bfbf2a1b85","ssdeep":"","tlshash":"3b614b972721192c4b13894b52a55ecaa7ebdf149f0814dc049d376b2f35a39807a327","first_seen":"2026-04-30T10:35:06.645146Z","last_seen":"2026-04-30T10:42:40.641165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/coins/binancecoin.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /coins/binancecoin.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 21673\r\naccept-ranges: bytes\r\netag: \"d2963b42f5b0f6cdcad306c98082cfbc\"\r\nlast-modified: Sun, 28 Sep 2025 20:00:57 GMT\r\nserver: cloudflare\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-store\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXxO1%2B4pO6KUWXbl4OqMjh%2BhoQZQCTw9IIHjhQ4YxBddacpRfJTnzMOwfnCy75xpLvItLQHEtW9b9ml%2FeHWFjnrXbl2PQImKNX6uKleEo%2BjWLabUtatmCuc%2F5afOZiePYMU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncf-ray: 9f45e509c97d56b4-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d2963b42f5b0f6cdcad306c98082cfbc","sha1":"918ef4bf2083e0deb045febec8847c5b2811efe6","sha256":"72a5e32484f693a8a2d6f8310d364c4362911daf764603e955c79e17fffb33e0","sha512":"8ad332b591d291ac1e346f8b6c7e9d1fa3fce5d4f3436fd006e10c95c399bcfbb265fb28a452fd869ad25375d8b0bce535467d302a3953008336a047bb644c53","ssdeep":"384:igm58+U4mI5NsuKLdjjq6ZpqG6WS3bJ0pdZCqqhBnk/ZrateYC5XBTpiwL7oo:X+U4mIkuAjqCF60poBnUZraedpiSt","tlshash":"2da2e0c0bce0bb50573a5fa7ccfb992c57110f5b5aaa4e46bdb3c028e175d8391a2349","first_seen":"2024-07-06T20:02:44Z","last_seen":"2026-05-09T04:51:00.869751Z","times_seen":405,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ogaudit.com/api/eth-gas","fqdn":"ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:35.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /api/eth-gas HTTP/1.1\r\nHost: ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ogaudit.com/\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_VM43RWN4E8=GS2.1.s1777545274$o1$g0$t1777545274$j60$l0$h0$dujeiSsQlqKWFQdHtqr8Ng0_OmgqF68Nd6A; _ga=GA1.1.438024080.1777545275\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:35 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 50\r\nx-ratelimit-remaining: 49\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJiOHVaaUtoU2VZejVYUEV0bGhJcUE9PSIsInZhbHVlIjoiN3Y5RTZVYjZkTERhTmVXbnhPU1FZVGs3TnloVFpNRkJ4STJmS1BiY25EdmZUYjJRdlRHNXhZYmpIV2psWG0xdVMrMzFvaG5jTnZDNTF1aG1iUjN6N3NXR1c0NVRBcERKOXdtM01YdDJJWTRmNXRHNGphVXExZ3d4VG0zS3ZjUnciLCJtYWMiOiJkMTllYzgwYmIxNGM3ODBlYWQzNTc1OWVhYzg5ZGFkODM1OTE2YzM4Yjg4NmNiODE1ZGE2ZDI2NWM0NjVjNWQyIiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:34:35 GMT; Max-Age=777600; path=/; secure; samesite=lax\nlaravel_session=eyJpdiI6IlY0cWVUMG1JSGg3alNRZnp2djVjYlE9PSIsInZhbHVlIjoiMzBlUm9LWXB1SnJQMFJraWtERzRhWHNTVnZ6NnZnVTlPTUJMQ3NVSFMzK0l4RlJvNDdjbVdKMjJaL2RvbnR4UHZLK3E4cDF3S094U2dlUXhHOStOTldMdTlIN3N3ZFRLR2NVdnZrNWFHbnVxa1E3QnhKcFBSZTJzeFJISW1YSHEiLCJtYWMiOiIxZjZkOGUzYjE1MDc3MDZlNTQwNmMxOWFhNjQ2ZDYzYzVmZDViMjkzYzJjOWIyOWE5YjRkMjIwN2M2MzhlY2NlIiwidGFnIjoiIn0%3D; expires=Sat, 09 May 2026 10:34:35 GMT; Max-Age=777600; path=/; secure; httponly; samesite=lax\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBYtzO4cQU8b6ji5I0RBekQY60ukvVygQWvwI2p7b1hNsbGzGj3ddqpOBMUgZoXB1zZM%2FG7aoYJQ1%2FfqMQttbP4GhBaw2JBgtpLcnWiB%2B1XDXnVEDyLxM8fV6OjinA%3D%3D\"}]}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-ray: 9f45e5116a8956b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":192,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8fd477b96014785c689df527cbe682be","sha1":"edeff757de909b3493fcf6224a8b5a866b9e7bab","sha256":"d2c7ce811a3b92018103fd1640a9079d19d1191a294293fa2a948fb276c7c143","sha512":"641e61195b14fff5f6139c075916f5bd6294974dac019cbfe9beb1e0bc9697fbb2c66e977f43bc3d1e298c81c334b68c16a2c6f339a94cb4de947c4e170b2cca","ssdeep":"","tlshash":"61c012e12122acd1c9182e875855fe94659e3c0973c5da49e7a85954490ca3b6c11064","first_seen":"2026-04-30T10:35:06.646601Z","last_seen":"2026-04-30T10:35:06.646601Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.ogaudit.com/cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/the-white-whale.png","fqdn":"img.ogaudit.com","domain":"ogaudit.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogaudit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 23:10:35 GMT","end":"Wed, 03 Jun 2026 00:08:14 GMT"},"fingerprint":{"sha1":"DB:AC:01:14:B7:02:4A:0A:C0:FA:85:C8:89:63:39:C7:8E:A9:FC:81","sha256":"FB:47:88:54:00:13:08:2C:AF:FC:41:07:0F:14:09:91:D7:31:06:01:64:4A:32:82:BD:88:5E:F4:CA:3C:93:21"}}},"request":{"raw":"GET /cdn-cgi/image/width=24,height=24,fit=cover,quality=85,format=webp/coins/the-white-whale.png HTTP/1.1\r\nHost: img.ogaudit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-ray: 9f45e5060d8756b4-OSL\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\ncache-control: no-store\r\netag: \"cf9KN43-x97T7kNnWGWDQlJBOOE0dYBfgcm2j4njn3Dw:c84e1d00e425471d336a0e851c83dd8c\"\r\nlast-modified: Thu, 25 Dec 2025 08:40:23 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept\r\ncf-int-resized: {\"original_bytes\":16346,\"original_pixel_width\":250,\"original_pixel_height\":250,\"pixel_width\":24,\"pixel_height\":24,\"image_header\":\"{\\\"fit\\\":\\\"cover\\\",\\\"format\\\":\\\"webp\\\",\\\"height\\\":24,\\\"quality\\\":85,\\\"width\\\":24}\",\"unique_transformations_billing\":true}\r\ncf-resized: internal=ok/r q=0 n=60+0 c=0+3 v=2026.4.4 l=388 f=false c2=0 wv=2026.4.0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nwarning: cf-images 299 \"cache-control is too restrictive\"\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYlzL8Hj9ei7V82voqvMxC5vPAEVTVnmKxcK0SQVHLDsB2iyNqV8bwkJ8j5684diil7r7MHFnfMJQ9tTWqs7ma5sB1nThFw0LpGVGP5BsCDXJXNMpcDdoy%2BarV8P6y5HPbs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 24x24, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f3c8a85e0ae127fe8036c8ef9e8e49b","sha1":"cf5d1598cc2aeba3fae178a42a86dc9138887b2c","sha256":"37cc2c6ad275249503e8d548dd66fec83699254be875ecf672a846b332e1ad3e","sha512":"e3b2e294b0c29c94c1d66101864b275bb3a061ae9cdca9716e20c09e0c8a4e4783ed9ec82222fe621fd777c5c33cc5910a374f2352fcd746b957ca763581fd4a","ssdeep":"","tlshash":"63e0f832a1f50fbcc2b273a770484c0059ca9e492c88c8c3cef21b8af208ea01442d9e","first_seen":"2026-04-30T10:35:06.647491Z","last_seen":"2026-04-30T10:42:40.602328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"img.ogaudit.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.6.0/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ogaudit.com/","date":"2026-04-30T10:34:33.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/gsap/3.6.0/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 30 Apr 2026 10:34:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 22265\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5ffd3ef5-f398\"\r\nlast-modified: Tue, 12 Jan 2021 06:17:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 746511\r\nexpires: Tue, 20 Apr 2027 10:34:33 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2FYCYk78T4qRo79n7%2Bj4ZUQ7KuVianeLtBtTE2Wizgs1UPnn5qt%2FkWp513%2BCAw7bOQfx8ZE0YYkTqKKmUj2dgj4GP2Js4O9HxIQeXEPQtA%2FxSw1Gsh%2F4re5y1ZogJYJ8o6VEDuRC\"}]}\r\ncf-ray: 9f45e50658db712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62360,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62063)","md5":"537245fb53f486cf07d01b2aff390c15","sha1":"28f590ec969f6b67ae7fdf76db3b0271b5b77b49","sha256":"d3ed6cb466bd654fe36c57faacb1c88ad4e2793087431d6ffc5366961a4c978f","sha512":"d5d6a51c3906f44b5c3a60a7a028e2c10fc7101e520cdab0f1de06d8c2a83708e2c0c35e04092e76c04299294c9d776c1fc066d2639dded97fea72f9cb46cc69","ssdeep":"768:aPphBEP/XAr2G0+9O30pGSKN/PYvbzuhUO/5eWvckjTC/ESCOs964qzA2RMKCqhp:ahhOP4jOZ7CXTOxMwCIIM9Yp","tlshash":"8a53f9cd3292f427029751a0447f0a4bb337a958640f0918f269e5dd7d3c9aa42bff7a","first_seen":"2023-03-07T13:55:38Z","last_seen":"2026-05-11T14:37:03.737803Z","times_seen":330,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}