{"report_id":"1c44892c-a75d-4cdf-ada2-27804348e754","version":0,"status":"done","tags":[],"date":"2026-07-03T16:02:54Z","url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"title":"Ondo Perps","dom":{"size":2032775,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65418)","md5":"3fd3cf6e91d738383f19eeaf063aac5a","sha1":"9e42fc8309714f3b1038632404ead5bbb9b89f99","sha256":"88b4298f46ea0c4d8d03a50188328d5e46970e1fc1cb9c0a66dbb33b952cdaa8","sha512":"af2b5a9c63fc84865bbbfcc7fc3cf19e6e93a4d39d8112498d3baf97eaffd0cf1f91e36b14e88467327a39081b44ce6329b85cf7414a7590ac73ebd6f847caf4","ssdeep":"24576:kRPPXcztrcjeqItFztEAER4jPqrMmUGMBn8ZAJCWm+Rdi84PKIGoj4yM7:v+jeqstEAAfEh6g2KyM7","tlshash":"7395e172c101252a81093f4ad9e62b8c7e19e04fde1749c9e7c823bba5c79df9c5225f","dom_hash":"domhash420f288ff5db1b83092cbf19d28e3327","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-07T16:02:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"verification-ondoperps.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-07-01T18:15:14.336691Z","alert_count":0,"request_count":3,"received_data":2150807,"sent_data":2449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-07-01T04:04:10.597406Z","alert_count":0,"request_count":1,"received_data":2162753,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"verification-ondoperps.xyz","ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-03T15:20:26.473698Z","last_seen":"2026-07-03T15:20:26.473698Z","alert_count":3,"request_count":3,"received_data":2261659,"sent_data":1542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-07-03T04:55:00.622778Z","alert_count":0,"request_count":1,"received_data":327441,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"9984eee9dce4.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-07-03T16:02:57.904992Z","last_seen":"2026-07-03T16:02:57.904992Z","alert_count":0,"request_count":1,"received_data":3313,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"moonito.net","ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-09","domain_rank":0,"first_seen":"2023-12-14T04:16:52Z","last_seen":"2026-06-28T12:08:54.933412Z","alert_count":0,"request_count":2,"received_data":2597,"sent_data":1098,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"53de7498840c.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-07-03T16:02:57.903703Z","last_seen":"2026-07-03T16:02:57.903703Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-28T22:47:06.167692Z","alert_count":0,"request_count":1,"received_data":3609,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-07-02T02:08:46.864778Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-07-04T07:20:31.167159Z","times_seen":62154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-07-04T07:20:31.172037Z","times_seen":57570,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43d643e449b4ea13394fe737b1d6a447","sha1":"1c03d56d955fd266d7659379e63d5711bd5382db","sha256":"4817661f6ac7d2e1691bc3aeb9966e66012891ccda569ff872dc0932010c540d","sha512":"5e7353c42119793fd3ff6b548f7604c3385c91c8243b8f66e926f8cdb0121ef2f39f63584047df346e3970d46de6355045676a16c01625b9c4581cba99337ad8","ssdeep":"","tlshash":"2390029a32d2940447a755580096188890284c6928455d414490dd91d8550225b1557e","size":48,"data":"","first_seen":"2023-04-11T22:45:29Z","last_seen":"2026-07-04T07:20:31.172644Z","times_seen":59159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-07-04T07:23:34.819784Z","times_seen":349429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc5d42c38a778daf89b03db7ea6861ee","sha1":"fc6ec9436b89d6002eed218b81fd6b0c03f47991","sha256":"9f6a7300790843ce304b81d171d0337559e368d68af27501f6c8282eaf31a2bf","sha512":"df6302069043b150a9590eac436bdd8bde61c21c21a6b2c752cb8ec44c76a4f3e7eafd4fdebfb3a804c422a0e6b57debc3c534f8313d2c4fd38c038f69237f2b","ssdeep":"6144:Uw9U2t7iA27uyqpOGGiXhTVYY4nU3phQO:1iut","tlshash":"d46461bf234457ab57d106ea80de190b17f5d9176424a8d8fa71b8eefc28cc34439a39","size":326575,"data":"","first_seen":"2026-06-30T18:48:09.181733Z","last_seen":"2026-07-04T07:20:31.153044Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/c02a02976e0a8e4ffbe3934c8f0d857657218e285b1b82a17b48a9774eb7bc78/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"156b5061ae8c2af3ad939a85e9beba39","sha1":"20ac3f7e0192599764c76d7158673fd447819a22","sha256":"c213837910feaafc5f287d11a7f0ea4ea420026c33ea50b33f5c328e0d4a50c6","sha512":"57120a894ae1491d086d52f2ab4ad230b487f09f4aa168520302acb9d8ae3b8cbcc7cf426577b34e95575d5e56db33b6e54f7429031326270c2629dc2c769ebc","ssdeep":"24576:O3PlGwAanDG/zLFk2SyTOsFelDSL1cm7n:uzO","tlshash":"09155b7fcb145629fbb345bd651a3113bc0c98eb0224ddd59f8ec8b3a8a446f584a4ec","size":959729,"data":"","first_seen":"2026-06-08T02:01:55.69559Z","last_seen":"2026-07-03T16:55:34.929655Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/moonito-net/lib/analytics.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"42f3f262443ac35456b84885e61d3950","sha1":"f85f5f38c845f36747eed16896317cadf90bb020","sha256":"6680beb20bad75b57199ff562d9f70f4819bb8dde721c24d7cd9b883fdb50484","sha512":"5bf3432b3cae85558e62cbe2f143a60380ab60ee0bce7e7ef4721497b6ee22670ea75d34e79dc292880998cf9ad3af0234d1e45eba7dc5163d18060399cdc4ba","ssdeep":"","tlshash":"4751039477901972a3675f9b653f2089d02a497d3c6f8c8ff44478402b51927f6a13bf","size":2838,"data":"","first_seen":"2024-02-20T16:13:52Z","last_seen":"2026-07-03T16:03:01.326114Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a100b0c41f8fac5082061341847664a","sha1":"4c02c67905c91b7f36925ee36d525e8fbf48deb0","sha256":"91dc7f5b26a39911e206212bf625521728559fbc1dd9eff02e89d1773006a129","sha512":"d1dd48df9af0a3dbaf3fac48c055227fbac0b48896a3028658d3922d47b860597948186c21f4b8d239f721c85261ed9ef0ad4ce8015a567c2d4e759fe7ef637e","ssdeep":"","tlshash":"abe0ab31193461768afe18cf9432bbf9556621587008d088343d9c8bcc64e525fe2ccc","size":430,"data":"","first_seen":"2026-01-24T00:00:40.492243Z","last_seen":"2026-07-03T16:03:01.336286Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f88cb82a1455dd9eea2c74ec4d2f4261","sha1":"b8b19b9de09770e9b04fa87492254ea8b0b5d470","sha256":"928757c51fffa4307e9a9cd89145fbc135e8e8e6872ee24b8a9056e66531a2a9","sha512":"035fbdb0fa30e1e95936f66a558abb441093cd1974761bb205c8642eedb4605e646366a67dbd6d76a901d7e8779ebeda87b0d54f1628cef823efd1fcca2d29a1","ssdeep":"","tlshash":"1cb0125c24612234010ba0ff92d916847010108ab4045745741c8b502f50b321525919","size":94,"data":"","first_seen":"2026-07-03T15:24:28.149263Z","last_seen":"2026-07-03T16:03:01.336862Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca55728863b2033b6db756ed61ec55b","sha1":"96d07f49290583f99884383bd49477f56fd576b8","sha256":"044d88420c0ce8f56aba3da5e205a51a34e4b5d18cd80bb2e31143066f1d6454","sha512":"7bfbfcfc61fced333be848cbd4e130e16747606cc2bd89f8f631478ce69d02790e1e8e2c484b1ac6a986b654b4c0b50895f2b3f4d8bf7a829aa0802136d8e8f5","ssdeep":"6144:aw4sOPcZPaaq1jXcEHeP1GpRzU+VBB6iFDaMmDdaas8VCd4Au:msusaaq1j1U+J6idmzj","tlshash":"e9c4e7bb630023aa57d512ea40de190b53b5e41a711694ccf671e8eeac7cc8b543eb3d","size":592880,"data":"","first_seen":"2026-06-30T18:48:09.186743Z","last_seen":"2026-07-04T07:20:31.168568Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=checkbox\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ca55728863b2033b6db756ed61ec55b","sha1":"96d07f49290583f99884383bd49477f56fd576b8","sha256":"044d88420c0ce8f56aba3da5e205a51a34e4b5d18cd80bb2e31143066f1d6454","sha512":"7bfbfcfc61fced333be848cbd4e130e16747606cc2bd89f8f631478ce69d02790e1e8e2c484b1ac6a986b654b4c0b50895f2b3f4d8bf7a829aa0802136d8e8f5","ssdeep":"6144:aw4sOPcZPaaq1jXcEHeP1GpRzU+VBB6iFDaMmDdaas8VCd4Au:msusaaq1j1U+J6idmzj","tlshash":"e9c4e7bb630023aa57d512ea40de190b53b5e41a711694ccf671e8eeac7cc8b543eb3d","size":592880,"data":"","first_seen":"2026-06-30T18:48:09.186743Z","last_seen":"2026-07-04T07:20:31.168568Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=checkbox\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:26.518Z","timestamp":1783094546518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=VXnqxRvR2BdD52RF0Aqw.y1LoFntsm7mDXtOUE4RbZQ-1783094545.9539135-1.0.1.1-3GnRSgej6rxeK29khUXkOOCRDhcgBDOqIT6MFyXfyBTcEbn0mJP3tsVlfpFQutOvO1tYtoWtrdTriAfhz52oLVHhf5T7mHOQ0CSFMXb3hnvSMT29aqvjABSaDztPEJkJ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 16:02:26 GMT\r\ncontent-type: text/html\r\ncf-ray: a1571d53be7e1ae6-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594632,"size_decoded":182395,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"97a69da74ed877fed834dccbc71435bd","sha1":"3aff054050109f5bb7e6c69bd42502c447d74e2b","sha256":"4211bfd9d4a0afc8d5570936a6eb73cadb6d8a4662535154df6f9a9d66a51d88","sha512":"9c5af5063e0d4d62c2307a6f6a85656ad9ba9c1c802de29bdc07761f8f267b3d62d0a98ab59dd0b649e7c9edd53c90f646966dc99a8bb7b3d1aace2d976542c4","ssdeep":"6144:Hw4sOPcZPaaq1jXcEHeP1GpRzU+VBB6iFDaMmDdaas8VCd4Ax:Tsusaaq1j1U+J6idmzi","tlshash":"5dc4f7bb630023aa57d512ea40de190b53b5e41a711694ccf671e8eeac7cc8b543eb3d","first_seen":"2026-06-30T18:48:09.172901Z","last_seen":"2026-07-04T07:20:31.160732Z","times_seen":250,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg#captcha-wave","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:25.940Z","timestamp":1783094545940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 06:58:07 GMT","end":"Sun, 27 Sep 2026 07:58:01 GMT"},"fingerprint":{"sha1":"90:85:6D:F4:9C:AC:E3:2C:4B:54:B0:DB:FA:84:A8:8A:20:95:43:F3","sha256":"2C:D4:A1:A9:00:99:E6:DA:AE:F2:A2:70:C8:45:84:59:3D:BF:7D:EC:EF:D3:46:AC:04:C6:8C:57:50:1B:5C:A7"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 03 Jul 2026 16:02:26 GMT\r\ncontent-type: image/svg+xml\r\nset-cookie: __cf_bm=tVtE6UtCvrr92S1wYpa2uNF5K4yK5THhsPoc6vw3FOY-1783094545.962369-1.0.1.1-DS1.soO0CG0TRQxbqH..g.NyKk972GDnVBCXbHxOA0Pf6IhyUkajEreAW2I0.tUIiavn6RLEmQO9eMWUc9u5NKAOeZZDmboVRblc2MtsVh0NEljb13xogFtyGV0X_1A6; HttpOnly; SameSite=None; Secure; Path=/; Domain=dynamic-static-assets.com; Expires=Fri, 03 Jul 2026 16:32:25 GMT\r\nlast-modified: Tue, 23 Jun 2026 16:01:11 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 864074\r\nexpires: Fri, 03 Jul 2026 16:12:25 GMT\r\nx-static-request-id: 0R21M665TY7ABX38\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"0338e8231f6db1f81784e63861cb71a6\"\r\ncontent-encoding: br\r\ncf-ray: a1571d504ec40daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2161826,"size_decoded":974739,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2884ab29d7a8170c45a1635a4630a3ef","sha1":"7702691075ae34db711d26f2b3f8d6db943ba686","sha256":"c1e4bf60638258e762333e377702f2d4e4fc90a960780859085bcc840205d8a4","sha512":"0b71d62f863c1cedec2f14de3da5f7da7d5cf250ce2d7847e75b0422a6c7a0ef60c7adf5fbe12fcefc0df8e965442f54f417bfa192a4dba6d01889a36292f733","ssdeep":"12288:8HamqgPgRaujhzJJuDeCNqY8Gi8mwXynxliFCOWYAoF5fAF0q:0PnujhzJJuDeCNqYI8mwXGxligOACf7q","tlshash":"4b2508ba5c1c6b4e766a4d3ddb26307d2e4b70eeb24481dfa9ce72ecc153451e921ca0","first_seen":"2026-05-22T15:05:26.838489Z","last_seen":"2026-07-03T16:03:01.325507Z","times_seen":168,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":72,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:26.495Z","timestamp":1783094546495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=VXnqxRvR2BdD52RF0Aqw.y1LoFntsm7mDXtOUE4RbZQ-1783094545.9539135-1.0.1.1-3GnRSgej6rxeK29khUXkOOCRDhcgBDOqIT6MFyXfyBTcEbn0mJP3tsVlfpFQutOvO1tYtoWtrdTriAfhz52oLVHhf5T7mHOQ0CSFMXb3hnvSMT29aqvjABSaDztPEJkJ\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 16:02:26 GMT\r\ncontent-type: text/html\r\ncf-ray: a1571d53ae6b1ae6-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594632,"size_decoded":182505,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"97a69da74ed877fed834dccbc71435bd","sha1":"3aff054050109f5bb7e6c69bd42502c447d74e2b","sha256":"4211bfd9d4a0afc8d5570936a6eb73cadb6d8a4662535154df6f9a9d66a51d88","sha512":"9c5af5063e0d4d62c2307a6f6a85656ad9ba9c1c802de29bdc07761f8f267b3d62d0a98ab59dd0b649e7c9edd53c90f646966dc99a8bb7b3d1aace2d976542c4","ssdeep":"6144:Hw4sOPcZPaaq1jXcEHeP1GpRzU+VBB6iFDaMmDdaas8VCd4Ax:Tsusaaq1j1U+J6idmzi","tlshash":"5dc4f7bb630023aa57d512ea40de190b53b5e41a711694ccf671e8eeac7cc8b543eb3d","first_seen":"2026-06-30T18:48:09.172901Z","last_seen":"2026-07-04T07:20:31.160732Z","times_seen":250,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":19,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/moonito-net/lib/analytics.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:25.899Z","timestamp":1783094545899,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/moonito-net/lib/analytics.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: HEAD\r\nx-jsd-version-type: branch\r\netag: W/\"b16-+F9fOMhF82dH7tFoljF8rfkLsCA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Jul 2026 16:02:25 GMT\r\nage: 7586\r\nx-served-by: cache-fra-etou8220090-FRA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1216\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2838,"size_decoded":1987,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2837)","md5":"42f3f262443ac35456b84885e61d3950","sha1":"f85f5f38c845f36747eed16896317cadf90bb020","sha256":"6680beb20bad75b57199ff562d9f70f4819bb8dde721c24d7cd9b883fdb50484","sha512":"5bf3432b3cae85558e62cbe2f143a60380ab60ee0bce7e7ef4721497b6ee22670ea75d34e79dc292880998cf9ad3af0234d1e45eba7dc5163d18060399cdc4ba","ssdeep":"","tlshash":"4751039477901972a3675f9b653f2089d02a497d3c6f8c8ff44478402b51927f6a13bf","first_seen":"2024-02-20T16:13:52Z","last_seen":"2026-07-03T16:03:01.326114Z","times_seen":113,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":10,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-ondoperps.xyz/meta.png","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:25.942Z","timestamp":1783094545942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-ondoperps.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:03:21 GMT","end":"Mon, 28 Sep 2026 13:01:46 GMT"},"fingerprint":{"sha1":"71:EE:C7:E4:C1:01:6D:3D:33:F8:BA:E1:A7:E5:11:91:B7:10:CA:85","sha256":"48:D3:D0:7F:92:3A:CD:36:35:80:57:23:6E:40:96:FB:08:EF:3F:39:79:F5:11:F2:66:96:73:50:3B:1F:D1:9D"}}},"request":{"raw":"GET /meta.png HTTP/1.1\r\nHost: verification-ondoperps.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=3d920m0bbim3m5ol2p510cmv6d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 16:02:25 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Sun, 19 Oct 2025 17:34:40 GMT\r\netag: \"68f52130-df1f\"\r\nexpires: Sun, 02 Aug 2026 15:06:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: HIT\r\naccept-ranges: bytes\r\nage: 2551\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wf31u7T7BEqmWLBV3trGEWV1t2fBGyCmG0ScMLFp8N0bewpxBYPZbPXgLQac0zBbQ9nGsJfNf2u6HKSIEzKw8auYit7iUG5i7gGszEvxhLXww1SHypNHdxZeB0%2BayLhKUCg%2Bsrzg7h%2FB8Sy3Pw%3D%3D\"}]}\r\ncf-ray: a1571d502b38b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 57119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57119,"size_decoded":58111,"mime_type":"image/png","magic":"PNG image data, 684 x 198, 8-bit/color RGBA, non-interlaced","md5":"23c557942de849b56d32df74b12d3251","sha1":"2c08c7ca36eb1a6f2bda8358f8ea4c13b29ee5f5","sha256":"f45a73f7e6c8da58f9e61a041cb2a6464ac1a676901be57751f98d96064610cd","sha512":"a36233907085097f20424de3acd0ab7e388eb6bf402cdc2261ad45e0db9d449fe40c159c224f85bc3f842ee1fdf1e88f7fc67739f92199529d17312ad922be7c","ssdeep":"1536:G6Yr/hslasynYr1IbOe7cKQMOAAPQ35Z5tH:G/tLChIbGKQMOAtJZ5Z","tlshash":"3e43e007ce95fc5228e60ccf6ba7b5c6e70e0109a188cf5e1778ad260d27e63e6b4d50","first_seen":"2025-04-12T01:01:45.904889Z","last_seen":"2026-07-03T16:03:01.326714Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"verification-ondoperps.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:25.925Z","timestamp":1783094545925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /1/api.js HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 16:02:25 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a1571d503bb91ae6-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=VXnqxRvR2BdD52RF0Aqw.y1LoFntsm7mDXtOUE4RbZQ-1783094545.9539135-1.0.1.1-3GnRSgej6rxeK29khUXkOOCRDhcgBDOqIT6MFyXfyBTcEbn0mJP3tsVlfpFQutOvO1tYtoWtrdTriAfhz52oLVHhf5T7mHOQ0CSFMXb3hnvSMT29aqvjABSaDztPEJkJ; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Fri, 03 Jul 2026 16:32:25 GMT\r\ncache-control: max-age=300\r\netag: W/\"f84e4ec34e82b8dc08ecd7626c2f05b5\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326575,"size_decoded":95404,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"bc5d42c38a778daf89b03db7ea6861ee","sha1":"fc6ec9436b89d6002eed218b81fd6b0c03f47991","sha256":"9f6a7300790843ce304b81d171d0337559e368d68af27501f6c8282eaf31a2bf","sha512":"df6302069043b150a9590eac436bdd8bde61c21c21a6b2c752cb8ec44c76a4f3e7eafd4fdebfb3a804c422a0e6b57debc3c534f8313d2c4fd38c038f69237f2b","ssdeep":"6144:Uw9U2t7iA27uyqpOGGiXhTVYY4nU3phQO:1iut","tlshash":"d46461bf234457ab57d106ea80de190b17f5d9176424a8d8fa71b8eefc28cc34439a39","first_seen":"2026-06-30T18:48:09.181733Z","last_seen":"2026-07-04T07:20:31.153044Z","times_seen":287,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":6,"connect":18,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/c02a02976e0a8e4ffbe3934c8f0d857657218e285b1b82a17b48a9774eb7bc78/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-07-03T16:02:27.012Z","timestamp":1783094547012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"GET /c/c02a02976e0a8e4ffbe3934c8f0d857657218e285b1b82a17b48a9774eb7bc78/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html\r\nCookie: __cf_bm=VXnqxRvR2BdD52RF0Aqw.y1LoFntsm7mDXtOUE4RbZQ-1783094545.9539135-1.0.1.1-3GnRSgej6rxeK29khUXkOOCRDhcgBDOqIT6MFyXfyBTcEbn0mJP3tsVlfpFQutOvO1tYtoWtrdTriAfhz52oLVHhf5T7mHOQ0CSFMXb3hnvSMT29aqvjABSaDztPEJkJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 16:02:27 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\ncontent-encoding: gzip\r\netag: W/\"156b5061ae8c2af3ad939a85e9beba39\"\r\nvary: Accept-Encoding, Origin\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: a1571d56d8e61ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":959729,"size_decoded":402109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"156b5061ae8c2af3ad939a85e9beba39","sha1":"20ac3f7e0192599764c76d7158673fd447819a22","sha256":"c213837910feaafc5f287d11a7f0ea4ea420026c33ea50b33f5c328e0d4a50c6","sha512":"57120a894ae1491d086d52f2ab4ad230b487f09f4aa168520302acb9d8ae3b8cbcc7cf426577b34e95575d5e56db33b6e54f7429031326270c2629dc2c769ebc","ssdeep":"24576:O3PlGwAanDG/zLFk2SyTOsFelDSL1cm7n:uzO","tlshash":"09155b7fcb145629fbb345bd651a3113bc0c98eb0224ddd59f8ec8b3a8a446f584a4ec","first_seen":"2026-06-08T02:01:55.69559Z","last_seen":"2026-07-03T16:55:34.929655Z","times_seen":21,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"9984eee9dce4.w.hcaptcha.com/logo.png","fqdn":"9984eee9dce4.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-07-03T16:02:26.756Z","timestamp":1783094546756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 22:12:08 GMT","end":"Fri, 18 Sep 2026 22:12:07 GMT"},"fingerprint":{"sha1":"A3:83:3A:BE:7F:86:83:A3:24:4C:18:2D:88:18:75:B2:29:38:CA:E2","sha256":"B2:11:2F:62:A2:20:A9:9D:B5:32:8A:D8:8F:A7:A5:6A:7E:39:3D:15:DA:CD:07:AB:9D:70:E3:C3:68:1B:12:4E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 9984eee9dce4.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Jul 2026 16:02:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=oqmJnFWcKN91MnbWQbcQ0KxR6s6lUaqb_AWrIB9qkhY-1783094546.774337-1.0.1.1-f3bf6O021xkzcjb8u9NoFPQ9KRqSQOh7fwo8eG7y.ftlp13KRHK2_JJ_a6IRzJhzewcyTwsokkyrdYlMqJW_ivR4Zxj_lDXg92dUQFuboRxvBCWnjJz7EW16aozCnoo9; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Fri, 03 Jul 2026 16:32:26 GMT\r\nServer: cloudflare\r\nCF-RAY: a1571d5558ac0afe-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":3313,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"81d04af43894138e95d3f0459210da4a","sha1":"9005c09f09538e2a2ba94554593bd19509d11f04","sha256":"122f75c2a44deae4b0f3ee720d0f74df6d61979eea9839aa64c6c1a3ba7cf9f2","sha512":"a70c45b78164cdd8050fa49b26170eb338764ac3f709973edad100f0a4cda5d0609eda08a082c51de34992682b906db2c6a903b81bcd1ed35ff2b6e9b2b0e813","ssdeep":"","tlshash":"1f51a687af10824ad01e0f3121b91b19b2b7e73d3f1c639b65247574fea63c5245e298","first_seen":"2026-07-03T16:03:01.32854Z","last_seen":"2026-07-03T16:03:01.32854Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":11,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"moonito.net/api/v1/counter/verification-ondoperps.xyz?events=%2F","fqdn":"moonito.net","domain":"moonito.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:26.025Z","timestamp":1783094546025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonito.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 May 2026 06:27:12 GMT","end":"Tue, 18 Aug 2026 07:24:51 GMT"},"fingerprint":{"sha1":"D6:5A:1D:FB:E7:A5:7E:D6:BD:09:46:E2:56:D2:CD:1A:86:91:67:75","sha256":"E3:7D:F6:D6:DA:A3:21:76:19:C4:5F:73:F3:6B:71:01:F2:C5:EB:95:86:54:72:DE:74:80:01:DF:70:6A:8B:C4"}}},"request":{"raw":"GET /api/v1/counter/verification-ondoperps.xyz?events=%2F HTTP/1.1\r\nHost: moonito.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Public-Key: D0Zkbl4klX7UNM1c6FcW14nGvY3ys1Rr\r\nOrigin: https://verification-ondoperps.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Fri, 03 Jul 2026 16:02:27 GMT\r\nx-ratelimit-limit: 3000\r\nx-ratelimit-remaining: 2999\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IKFdDY5BtZ65Y4at%2Bey%2FC7HhZRYJQhaZyVYvFhSSNIJ%2BjcfS14ekqProePb3V9ABBdtSo7L98NvHH6%2BjSDlVAJ2EEWa7sTP%2FFVq%2FD53P%2B%2F55mAdDKjB%2FE%2BzNxMFWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1571d551e113181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1097,"size_decoded":1327,"mime_type":"application/json","magic":"JSON text data","md5":"7f41be436025f6af06468d67b7d05fc8","sha1":"93cc535fa3b88b789a0e12f7fdfafec14a47e600","sha256":"c5603f977bf9573303184e547518c7499e9ff7ab5fc81b7f3be6d2251b3094e4","sha512":"90a9d0bc58e140dc0a48b04db2c5c3648a7d77b3b68de961c594b835c3e8edf1107131a15aed263f93f604ab16bb3191addbf6c14ed11d0f437d6358dc1b3a70","ssdeep":"","tlshash":"2811aa2e40b89dba5a8b0b5515427e17a37e205322d4fd31d5e08f3078ff2b8b12466a","first_seen":"2026-06-15T05:21:32.931709Z","last_seen":"2026-07-03T16:03:01.329517Z","times_seen":9,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"53de7498840c.w.hcaptcha.com/logo.png","fqdn":"53de7498840c.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:26.486Z","timestamp":1783094546486,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 22:12:08 GMT","end":"Fri, 18 Sep 2026 22:12:07 GMT"},"fingerprint":{"sha1":"A3:83:3A:BE:7F:86:83:A3:24:4C:18:2D:88:18:75:B2:29:38:CA:E2","sha256":"B2:11:2F:62:A2:20:A9:9D:B5:32:8A:D8:8F:A7:A5:6A:7E:39:3D:15:DA:CD:07:AB:9D:70:E3:C3:68:1B:12:4E"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 53de7498840c.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://verification-ondoperps.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Jul 2026 16:02:26 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=Xk9DZ8iTPwnXa8HW339x.VNDmDfX_aD.CaWl9J2tfDY-1783094546.5189614-1.0.1.1-G3nByjwrZHjFhx.fcON5MBg8H_S6zxd6rl55NH.YB.dchq1oPFN2CTa6cl.TROr0KzV7KXEfk1K2kEfeBLth4UVf7u0o9L_6dYTUdWwPAqOsJOw3LcfYHv02_H3nkASN; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Fri, 03 Jul 2026 16:32:26 GMT\r\nServer: cloudflare\r\nCF-RAY: a1571d53ba8eb512-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"b1c5d1531c44cb7425923770e4802bfa","sha1":"520cbfb154532b4ca4d8c553a74cd60cb03ee112","sha256":"84b7daf02278c4e5077b0b373439b473652a914dbcd95de1ec5f4057981c1b77","sha512":"8ac93bfc8b0497b83b534eebda45d9333c9f0ba79a9f228eebbd0448977ce559aa419d79e7276c538a6232d03af233eeeadeac420acfa24f87f16e410db37bb7","ssdeep":"","tlshash":"a55184979f0943a6e41f1f7202b54f1be3b19a257b1eb30b6110b164dfa23c6584a189","first_seen":"2026-07-03T16:03:01.330124Z","last_seen":"2026-07-03T16:03:01.330124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":12,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=9dc608f7523036dcba6d237b5b05fba7d02ec2ea\u0026host=verification-ondoperps.xyz\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/9dc608f7523036dcba6d237b5b05fba7d02ec2ea/static/hcaptcha.html#frame=challenge\u0026id=09bfrbqumllt\u0026host=verification-ondoperps.xyz\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026theme=dark\u0026origin=https%3A%2F%2Fverification-ondoperps.xyz\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-07-03T16:02:26.977Z","timestamp":1783094546977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 23:06:23 GMT","end":"Thu, 17 Sep 2026 00:06:07 GMT"},"fingerprint":{"sha1":"15:37:06:F3:1E:27:70:C4:DE:28:0F:C3:2E:84:8F:88:07:F5:54:29","sha256":"00:23:56:31:31:AF:1E:2D:04:17:AB:10:CB:0A:1A:79:60:A1:73:B8:6F:B7:5E:58:AD:BD:06:60:41:42:6D:64"}}},"request":{"raw":"POST /checksiteconfig?v=9dc608f7523036dcba6d237b5b05fba7d02ec2ea\u0026host=verification-ondoperps.xyz\u0026sitekey=669c3bd5-bc89-4372-8b9a-2a01058e2a78\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=VXnqxRvR2BdD52RF0Aqw.y1LoFntsm7mDXtOUE4RbZQ-1783094545.9539135-1.0.1.1-3GnRSgej6rxeK29khUXkOOCRDhcgBDOqIT6MFyXfyBTcEbn0mJP3tsVlfpFQutOvO1tYtoWtrdTriAfhz52oLVHhf5T7mHOQ0CSFMXb3hnvSMT29aqvjABSaDztPEJkJ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 03 Jul 2026 16:02:26 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1571d56a8c31ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1236,"mime_type":"application/json","magic":"JSON text data","md5":"7c77fe020d7f2c76ac2645ebae656e91","sha1":"8bcba7340bf09a3772d794dcb064bc4cdc21ae21","sha256":"6e3fe149e424191f1ece2eb234359821879c1391718f39e09e49dbf4e488e1cf","sha512":"e8bd661f0cde134acb4b5ab1133ad32d69d9e8293ee02b1a543a66291dd3fd2a853729da0ee3c4594cbc2c0017667612747b278b4f4dd286dbdc4dc40046b49c","ssdeep":"","tlshash":"d201418a9254ad79d56b3a9a034c7f624f3a51f3a1e138f66d8fac00db4815c072663e","first_seen":"2026-07-03T16:03:01.331215Z","last_seen":"2026-07-03T16:03:01.331215Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":2,"dns":3,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-ondoperps.xyz/","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-03T16:02:25.074Z","timestamp":1783094545074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-ondoperps.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:03:21 GMT","end":"Mon, 28 Sep 2026 13:01:46 GMT"},"fingerprint":{"sha1":"71:EE:C7:E4:C1:01:6D:3D:33:F8:BA:E1:A7:E5:11:91:B7:10:CA:85","sha256":"48:D3:D0:7F:92:3A:CD:36:35:80:57:23:6E:40:96:FB:08:EF:3F:39:79:F5:11:F2:66:96:73:50:3B:1F:D1:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: verification-ondoperps.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 16:02:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncast-mode: default\r\nset-cookie: PHPSESSID=3d920m0bbim3m5ol2p510cmv6d; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B85ek5x0gAa7FlLkfaVlpvmBtVr9S91bIR%2BldOFD%2B3WxeiH8a83NJW2AGI%2Fe1dgdZZu%2Bko7fdMhbwxjLT5uDDjtPo3%2FyI8uY5x57B4UhX%2F7KrzzEZKDuXLX%2Ba9RuKJuwF%2FUSHVJtOjKs7G9Hzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a1571d4aeab9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015428,"size_decoded":1057390,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65493), with CRLF line terminators","md5":"c94c1ae1e5ba3b5f836af60782b6fa31","sha1":"d82f7d1695b9dd784898f2dcfe14d5a70586f439","sha256":"e9a80860b79669b0db59f0f14759d9a90dea150b984355c67069b4c0d9ef2489","sha512":"4e37864ac269d740e40c7a82944c3e0f7b9815a14b870f3982b9137aad0e907f72c37430679fb4e7e200a547f35288bb22e4774cff5620284a2780e3f0795e03","ssdeep":"12288:FqgP8472jDrXTeNNz2CD33HwYGel9JA/ErqfQtFj3UXD/hUd7fEAETF4jPXhpPUk:nR23Xcztrcjeq4tFztEAER4jPkxfu","tlshash":"832502334b12213a240b776398e36ecdb124f447db235bdad7e915998acb6ef095320d","first_seen":"2026-07-03T15:20:34.900041Z","last_seen":"2026-07-03T16:03:01.332105Z","times_seen":9,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":270,"receive":224,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"verification-ondoperps.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moonito.net/api/v1/counter/verification-ondoperps.xyz?events=%2F","fqdn":"moonito.net","domain":"moonito.net","tld":"net"},"ip":{"addr":"172.67.198.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:26.028Z","timestamp":1783094546028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonito.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 20 May 2026 06:27:12 GMT","end":"Tue, 18 Aug 2026 07:24:51 GMT"},"fingerprint":{"sha1":"D6:5A:1D:FB:E7:A5:7E:D6:BD:09:46:E2:56:D2:CD:1A:86:91:67:75","sha256":"E3:7D:F6:D6:DA:A3:21:76:19:C4:5F:73:F3:6B:71:01:F2:C5:EB:95:86:54:72:DE:74:80:01:DF:70:6A:8B:C4"}}},"request":{"raw":"OPTIONS /api/v1/counter/verification-ondoperps.xyz?events=%2F HTTP/1.1\r\nHost: moonito.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-public-key\r\nOrigin: https://verification-ondoperps.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ncache-control: no-cache, private\r\ndate: Fri, 03 Jul 2026 16:02:26 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: x-public-key\r\naccess-control-max-age: 0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyK2ltuqyc1L2o1CftfzO%2B281Ijs3ejkVAGM7qfXegdGLsu7QisiZfhRC%2Fu0uqPkie1jw9uCAkNcwbFVujs1fWAqTZYQ9wCqnc5bHGMwx2UoPaj5tufe7DjUiU6Qkw%3D%3D\"}]}\r\ncf-ray: a1571d50cda03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":763,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-04T07:30:45.117315Z","times_seen":16968051,"resource_available":true,"data":null}},"time_used":705,"timings":{"blocked":0,"dns":2,"connect":18,"send":0,"wait":684,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-ondoperps.xyz/cap.css","fqdn":"verification-ondoperps.xyz","domain":"verification-ondoperps.xyz","tld":"xyz"},"ip":{"addr":"104.21.73.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://verification-ondoperps.xyz/","date":"2026-07-03T16:02:25.573Z","timestamp":1783094545573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-ondoperps.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 12:03:21 GMT","end":"Mon, 28 Sep 2026 13:01:46 GMT"},"fingerprint":{"sha1":"71:EE:C7:E4:C1:01:6D:3D:33:F8:BA:E1:A7:E5:11:91:B7:10:CA:85","sha256":"48:D3:D0:7F:92:3A:CD:36:35:80:57:23:6E:40:96:FB:08:EF:3F:39:79:F5:11:F2:66:96:73:50:3B:1F:D1:9D"}}},"request":{"raw":"GET /cap.css HTTP/1.1\r\nHost: verification-ondoperps.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://verification-ondoperps.xyz/\r\nCookie: PHPSESSID=3d920m0bbim3m5ol2p510cmv6d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 03 Jul 2026 16:02:25 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 19 Oct 2025 17:34:14 GMT\r\netag: W/\"68f52116-2d6eb\"\r\nexpires: Sat, 04 Jul 2026 02:04:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: HIT\r\ncontent-encoding: gzip\r\nage: 2550\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNsRzipbx0sDzMOJujCTh%2BtS%2BJDH%2BcS%2FKtY8sRvH%2FDzxzFE1DIyv3r8JJvGsDiQK0JA4opjP3HqTlPC3no62adFGN15NzbYU7UqDBsQfA1Y%2FDnCBXlzq2T9q7k2pswT%2BSSZw%2FKhX0dBiuFXbkA%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1571d4ddaf9b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":186091,"size_decoded":118266,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64961), with CRLF line terminators","md5":"ac1d215374119b8b25a92d5e62050075","sha1":"58c42b8d121ae1503529cdda34d2a1bc44d8b6eb","sha256":"18538e3286fbf8eef00aa1650ff92f6ad95da4d5e6769c49e0f876a9bd1c91e3","sha512":"3f4cc3ecc441dcdae549d5722eb5793b13b57de352d0768d45f8740cb041d976aeea3b63d035de6ef51ef4d0bbf1318ddcf9f7dcb4bbd82ac526d99298f93bd1","ssdeep":"3072:VuW6tXqreGomfXpuuVAEQbosm3j9yIRoZYa+HqcG17z6euy00wnTVyF24bFOAA:S6UuVlQboD9yIRmcq6el5gTVyF24bFOZ","tlshash":"9704cf3fa611511a332b4e3e60fe3895c1248c45f9c15d9eb1f76d81f6f229db22e688","first_seen":"2026-04-04T01:02:17.112657Z","last_seen":"2026-07-03T16:03:01.333348Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-03","alert":"Sinkholed","trigger":"verification-ondoperps.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}