{"report_id":"6fed417c-de6b-43a9-a204-4fd2db3ed913","version":6,"status":"done","tags":[],"date":"2026-02-14T02:51:44Z","url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"title":"Owlto Finance","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T02:51:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"get-owltofinance.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"get-owltofinance.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"get-owltofinance.com","ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-02-12T21:12:06.903521Z","last_seen":"2026-02-12T21:12:06.903521Z","alert_count":159,"request_count":79,"received_data":6338342,"sent_data":36739,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"get-owltofinance.com/c150b067-9401-4589-ae9c-1af84c04a150","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T18:12:06.649103Z","times_seen":5109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2fbedb0b3347993aaffda511427d5ef7","sha1":"e20ab6a72f14d0d94e111b2f7b05c3260c936a07","sha256":"0d5314efb310b706bb73a055d0863a287a2636eb5e9eceae221a74a5895a94ec","sha512":"252650d07bdc4223ba829bba1298a0effa6d343cbc58d9651350bb49138d3baa710235fbc428fbc8f5b783f8531f4527b67751143b72a75790efe8f217e525b2","ssdeep":"","tlshash":"ce01f65d27f332b9627f2162d2038489be50506370dadc49741c91894fd6e6464de69a","size":657,"data":"","first_seen":"2025-06-07T13:25:17.713531Z","last_seen":"2026-02-14T08:22:12.898758Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/orion.js","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","size":107989,"data":"","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"get-owltofinance.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7cedee5f4aabfe0f0a25596641b0073","sha1":"9e90df4076abbd3350295826c5ad3ec1856ffd56","sha256":"c2e60dc68f09c70895f8cb98a4a88e16cf3c691d5a96b9c93c3aab931eafc258","sha512":"17dc0e86fcd7af709d5ffb50d255169d2300566d30c2da4345505703e6a6ebf303df263db9561688753bc03af86b134ccfa9f763966f8612ef554be796d6c025","ssdeep":"1536:jQe6pw4biVcuVXdWAgB1PusH2DY7sX3lX56oH:Me6KBVcuVtWAgR2Do2X6oH","tlshash":"7fa340d59a4bd0e08e5a11edd077ed0ae0281aa3cdacf193b92cded1355df22c84753a","size":104467,"data":"","first_seen":"2026-01-07T13:23:26.460119Z","last_seen":"2026-02-14T09:07:38.76649Z","times_seen":45,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"get-owltofinance.com/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"get-owltofinance.com/orion.js","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /orion.js HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-1a5d5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z8wcNytegK4ZYGK6uWP%2FOjA3aXAw%2Bk9Tso%2F5Le6E1KKDbuCJJZyGsneLjFj1JQXTSA%2FX0QVj4zVwdP9OkoQltnwfaeGKLaKkNvxsulculW0dgTSx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e1ae41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8256cac1bd4bdcddf5d245ee81fcc52e","sha1":"9a6dedf90a6703f3b2f4cdaecff3226bf689d201","sha256":"ab8c63dd12dd03136ccd032e5b3884c3d6fe72a9a36d8bca6bf99434332dd3bc","sha512":"2a46c67ddb2cb0c7680f68bd4d0e622ead7cc38a0c8034cade6f7bbde1a5c7c4bdce17e489646a28af1126b87c1f525d723f2592bacb4fff47001ab15727965c","ssdeep":"1536:9kaRasaz1dd527mjiIs113usHqBYLsVFX5saB:9kaRcz732aiIsVqBMs5saB","tlshash":"37b340d6594bd0d58e1a10edd077ec09e0681aa3cdacf183ba2cded2755df22884763b","first_seen":"2026-01-07T13:23:26.426463Z","last_seen":"2026-02-14T09:07:38.758383Z","times_seen":45,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-14","alert":"PHP webshell using some kind of eval with encoded blob to decode","trigger":"get-owltofinance.com/orion.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/02/07","description":"PHP webshell using some kind of eval with encoded blob to decode","hash":"1d4b374d284c12db881ba42ee63ebce2759e0b14","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_encoded_big","score":"50"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ee12e32730ca02da217eae426c9c46608ae72729.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ee12e32730ca02da217eae426c9c46608ae72729.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 3122\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-c32\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZB2eSQtXy8SnVZtnGawKxGV4NV1wBOxgC6d9hXyxUwfn6oHOkiPCDh8X3GLOjXpy9XTYofrsYIxNpFJ6Se1XRb%2BXLI0mUfEa25Q1FCzcMIpBcoh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 162 x 135, 8-bit/color RGBA, non-interlaced","md5":"73e95a89984440da9717efdac4ac4f87","sha1":"ee12e32730ca02da217eae426c9c46608ae72729","sha256":"8dac7189b998ee4315be9a182ac6616508b4eb5ab5204fbb6d32b1cd14d549ce","sha512":"d9dbf617d3ac4b439b6cd65e9752e76dfa605a662ca6b9cf9fb8a26cb45dcd3262641daffb214b233a6f5490ff3452ddbcb7965e2d0c6e0a9211db0a96f77d02","ssdeep":"","tlshash":"a2513b61ef49e075c56d79d14e092a587b68af8e30a1fd5c013b9922323ef2281e8ac4","first_seen":"2026-02-12T21:12:12.265927Z","last_seen":"2026-02-14T02:51:48.059256Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/binance-871ed508.jpg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /binance-871ed508.jpg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21084\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-525c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bj07Aq8dyhx8B2fwOOO%2FdR6kuA2Jf%2FtosKvNS2q5n4IqEJ%2F7615cBVKaC%2Bgx3Nb7DzwZ5aEaHQ6r77VS5qjhRkwPelZPnHsYZMagl5ifEu4i6tka\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21084,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"c4150381439518fde8cd45441ba47eda","sha1":"10d778191ad41655329bc623314461f62b7d5a52","sha256":"871ed5083c1c8d8a8d3dee069bcda8f16a35c91362265fedf11d3974bd693409","sha512":"ee7551aba3a9033b9b6ef2bf74b25b783e23ba626007d3cecc6ea706d3ae0e5723a08ab41664371e56250bc2e0e03e28ec39cd016bd6e1be4c0ecd077473f634","ssdeep":"384:0jtmVCOQMkPM/cp9aY8ROvkPlQKOC8layD3ocRKvBKrHz3UYkbQeZhfR:0RmgTsln8wy1T3x90","tlshash":"b7929e17930b66b5c65127b0651a0117983e7eccb2c9e89b17cb7844dc96fc52de8f11","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.802769Z","times_seen":18,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/030fd9d27ab4bb4176f2017f20dae2d44da397eb.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /030fd9d27ab4bb4176f2017f20dae2d44da397eb.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 893\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-37d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2siaOZBBveu8ICFO5C%2FD%2Bwhp%2BD%2F8w5k%2FyBZRTITjyUMABpuSdq%2FJGhKXQjYP37f6Wp9%2BRc%2F7cme3c4lv3yVZVlRTFabgWvKHVz7IPGGuEuobURk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b061525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 26 x 31, 8-bit/color RGBA, non-interlaced","md5":"dfaae4ae92107ed239b263240201b1f5","sha1":"030fd9d27ab4bb4176f2017f20dae2d44da397eb","sha256":"8417e09d7ae17a83e7d30269c7d230acec55f10f77a2a50d0565f08fb6d067a2","sha512":"fd196287b5bf12bb923e983d9735abcf8a87fd0dde9598a49d8211649aa46188404f329a954eba1eb76bd8949614ee53231225e666e35825f88917c3c4233098","ssdeep":"","tlshash":"eb1167c05e5c10fde7db8df104865e3a7e2d63155d9bb7473c9148164a01c86fd861b6","first_seen":"2026-02-12T21:12:12.242577Z","last_seen":"2026-02-14T02:51:48.06157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/banner-soneium1-41c571a8.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /banner-soneium1-41c571a8.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 5811\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-16b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kwxMKsYvHgbS67kHtgCZYyaRmY4HLzmE5GmVbyCO37G08nm11o34lTEEC9%2Fjm1C%2BOlB6o9ln5A1hjS7d8ZQR%2FQwxmlFnMOYAK0uVUk6ctdMNruG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e2aec1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"121d367253d694a028977544b77a32df","sha1":"903e15bbd57724a6a09c5aefb883974c3e47d117","sha256":"41c571a83ecac2e1bf917ca5231d18038c50692cab6c5c5af695e179f34e01a7","sha512":"dc12ed10870376ee2bfb78ccafff0faf22b062fbb8c195e3e1dac60445843d3df7f6b58cd0447936938d4ec7c46d8525db69bee5bd84c6a18200bfffd562feff","ssdeep":"96:s2xY6xG1YhEA4kvjSOgpMepJYmQ8yHF17PSG55Yov2nSJVRS1QRD1kra63U2NiZZ:sKDGmEA4krSTpMAJYlwro+SJVRSyHKNI","tlshash":"bdc19fb8e7ca1b3d039202b73d44c5441b78aac61d5345949c48117998cd8ee27e3eff","first_seen":"2025-03-18T09:17:53.554586Z","last_seen":"2026-07-17T09:07:02.848243Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/38d4d5b2adf0c5104cc855fbbe44a70c8945eac2.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /38d4d5b2adf0c5104cc855fbbe44a70c8945eac2.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1457\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-5b1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpmVjrbQMYLEz%2FKkBPRA6Mf1ozOgnAOq7M0NEkLQELlZ7%2BTIMutseQDGY7i7tw%2B%2BSc1fFbMVMbfKUubITpkgh8LsiHQ%2Bh%2BQ3%2BHI1cdJU8TUbtRLB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4b011525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit colormap, non-interlaced","md5":"080603db9ae47fc3bf0bcbb786de9eac","sha1":"38d4d5b2adf0c5104cc855fbbe44a70c8945eac2","sha256":"f47abd4b8757b52b57ac6a0dd4ca60abf004518f61d274b9b67cb9645db9c4db","sha512":"4ec46c069226a562905bdb5b4a419a15db1b6c9123a07e015a122eac46ca188f908a595bd39ac788b8a814295810efe092aeda6e208b739f0f89f21bb3e42732","ssdeep":"","tlshash":"8e31c4d21e600da8d845ec1e1ab7729a4420fca71df09892bf96ac26feb19170422987","first_seen":"2026-02-12T21:12:12.211332Z","last_seen":"2026-02-14T02:51:48.063652Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/8162a7040bf7de0c7363eb13b2706f195ac4849d.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /8162a7040bf7de0c7363eb13b2706f195ac4849d.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 605\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-25d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7x7pKgBxLhx6ltN%2FNUdrJVqhM18fJpy34AIVVQxZcVm%2B8u9yeC18HfzbtWykFGXD7pi5YxobUPhtRZdT6yH7EuJxguUOqcNRBia1kTABj%2FYtKdFR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4b021525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 36, 8-bit/color RGBA, non-interlaced","md5":"d10c23c20244b90aa302bf67780c4c22","sha1":"8162a7040bf7de0c7363eb13b2706f195ac4849d","sha256":"8607a0d1cf8549eb9084063608e8b3872414f21e9dbbded79abf6ee59e2156a1","sha512":"5ab928e310a8e23b7907fb6b6fa5035b0c765f22081a6346fbe942af44d7229e1f5c6bff1e663e93402c6d489bf2cb671664030f5233457cb47c88c0038ee644","ssdeep":"","tlshash":"83f0021a07251cd543feec7596284ca9e9e89bac428521ec1f08a464117b31a94c7b61","first_seen":"2026-02-12T21:12:12.234064Z","last_seen":"2026-02-14T02:51:48.064472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/eth_logo.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /eth_logo.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 9954\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-26e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JqXzMSV%2Facc6vxtUrLhBsQZfGLKmhE3NeXw63pFqD62Z4VMMDskoVTqVm5Ben4XSHLHgXyH1vmWFU67KSQwwlhOd0%2FUtaC9GtvEaccFXZ3pVULDT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ba5e4e2898869ecb36a49009a8858549","sha1":"aa940f1c549bd8537863aa03286c4d4bf31a73c7","sha256":"fecfa9f57e3a50507e2efe2d715fffdc0326de55519fa55d52bdb4e095eb72f6","sha512":"2466ed8517cefea9a22b5a92b646119f52f34504dd0c1e1dc8bf8d5d94d5f747aa290cec568aa8bcae53c00331884d18f2aba6dc2b0ed3279fb308e2a8cf8f33","ssdeep":"192:20pD19CCsXCwLMT2SCKJYRxiXZ/L10UthpsU8S88YROD:20paVD42YgxgZqaps9x/S","tlshash":"ca22af26d0a697ea8217b109619cbd9f49112bfdaf7ef40277fb053e2c3dd0b0294165","first_seen":"2024-07-19T21:37:03Z","last_seen":"2026-07-17T09:07:02.81362Z","times_seen":22,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/task-aa3284f8.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /task-aa3284f8.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-4d2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pu%2B5Y32eO6am443xG28ykVRlGQYnGyj8%2BBuIGDDosJ0time1Y8gL1ODN%2Bj1E5Rrr71rVdY2HCLfinjsLJypxWjS6U8S0c1BRbN%2FNWpzzFi2FeuEI\"}]}\r\ncf-ray: 9cd9435e6b141525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3cfcb068d79a6cfcc9d68c89d566ab1e","sha1":"4546b01a1c128590a366ae7f278ec2dd451416f0","sha256":"aa3284f8b55e3d3e1cfc1a75338849e727e95ed1251d487e39179434ca6c0048","sha512":"1351f61ffde00ad34764d8ca3aecbfec29b3aed0c992b176ae39b50f56ca302760f7a2f4dee95d71c11f230a5a9f5c2f023b56ad48822842c860a7da55914c9b","ssdeep":"","tlshash":"1821801e27bf6839980321aedb8592aa7436f1e3c345c54078ed2a249f05c531d333db","first_seen":"2026-02-12T21:12:12.206886Z","last_seen":"2026-02-14T02:51:48.066289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/67c70deb5fdecd0aa51f5799c9c4b9caa985e4b7.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /67c70deb5fdecd0aa51f5799c9c4b9caa985e4b7.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1201\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-4b1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpTt49%2FBYY1k2PzoaQ2mPhRGtwnOTTTScwHDXY%2Fz%2FylMizQPxqcdTvwmhLLiUzM%2BfTQZUzzbbC7OFv8uIIkCb13s816fJk%2FX1DcqynYi%2BkXoDQAs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e7b1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1201,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 50, 8-bit/color RGBA, non-interlaced","md5":"a69367c6417e039a4854c4852db3edd2","sha1":"67c70deb5fdecd0aa51f5799c9c4b9caa985e4b7","sha256":"7a825f0ab0387b7c05f848153c778764f08988a3de3334af25548b5b52fb1512","sha512":"4901653e596afe75d9327948ff349927becff33903493b20d44f4e18c53a67f355099755e7df80c4ac5cf0b17f37df458c7900c546b30e931df4290c265d323d","ssdeep":"","tlshash":"2d21b4f694305274c58e1bf367f71baea8aaec7e1b07af0c840845542fdb90608167f8","first_seen":"2026-02-12T21:12:12.236098Z","last_seen":"2026-02-14T02:51:48.067251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/db352e4d859111532ce576d7563e35608e9f5c15.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /db352e4d859111532ce576d7563e35608e9f5c15.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1432\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-598\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2Bm7mwLayUVEsXGfUeJ9ZCn8ZqPvI1bBNAhB6%2F3vjUjUBWjXFOv3MrAj%2B4D%2BplIWSauirZGivJic6u6fuyEwKTckh6aJZv9orcPVAUUatE%2FOJtmH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e8b1e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 67, 8-bit/color RGBA, non-interlaced","md5":"d08361a199b961d3fa0ab500451ac25d","sha1":"db352e4d859111532ce576d7563e35608e9f5c15","sha256":"4e20d20d55f827cffeb15b6a2029ac8d7313076e0907333aa38de214ffde4fef","sha512":"425b12d410387bb2f42590c8e5624a3a526c476b81d8d5e1daa7c8efebf86582c741bfc074f188a1b9567c59c0316e895ea37aee0d52e036f4f49391e5c9aa4f","ssdeep":"","tlshash":"e82119e37238e6650f2f1627df6380acf896571132959abf23354604f7aa388c413b0c","first_seen":"2026-02-12T21:12:12.204416Z","last_seen":"2026-02-14T02:51:48.068185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/OKX_Wallet-8e152bd0.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /OKX_Wallet-8e152bd0.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 16353\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-3fe1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ugcPdlfDtApcd6Wsl6JwSc9hiZH3SS7n7FL9GyBk4MQDKsHxGq8Zz1%2Fd5Ehf7afgeEA03%2BVjfSnm9%2BcbGkFuSNzxfD2zBEZfnH8bSbcbeFyC0qR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3afa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"2670a1accce6654847af8054a18012f6","sha1":"31caaf5a16061f7105ded41d873918460f339e83","sha256":"8e152bd068a87bef83bc8a60d2d252b4eda8eabec2506c883edbd97b33719372","sha512":"2a3bd48ccd12d997b29778afe4dbc924a0c3123f61d45ac80c1bbaadba0dfa97f8d108942487723a68da2ba0c42b4ab42c98215d2eddab8d1892a765521d453b","ssdeep":"384:XmE4LQDi09yVfMYntN5HUzI0JcBgjw4Dp3cgFW3+rg1:2A9yWYnXwjCnoDo","tlshash":"1b72bf99a1047d5c3bb12d894b06f0ce387197a8eaf24678e505b3794972413eb4deec","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.824146Z","times_seen":18,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/3d5904aa2bd581c5ba4122cc4b0e0a98a21f556c.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /3d5904aa2bd581c5ba4122cc4b0e0a98a21f556c.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 425\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1a9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Y3TJJQL3KRM7fY0PLjWEJ7ZsCrqT%2BfVpJGo02l0RFPq%2F61Hmjd02MkKhfsaIyu1SRoVstaqKi1KoqBfl9eM7xbtUwR6eOmx09exwn3YTpPJPpiL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b081525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 36, 8-bit/color RGBA, non-interlaced","md5":"e9be99dadf960aca9fa25337b28453e5","sha1":"3d5904aa2bd581c5ba4122cc4b0e0a98a21f556c","sha256":"0402609697605da13c7ea02e9b88098788047887a28493a88bc4806a9bbca512","sha512":"d5ca8acf4d905f5afa672d8f1ccea948cca21d0ea280cc36ac07ee02f42916bbbd027a182a2344de0e2d5ec3a5c5f124daaae8ecd11cdc75d12e19a09bc5b065","ssdeep":"","tlshash":"1ee023d4db0000eec318943f834af357bb86200f08fab805da22fd186217bc6c122f10","first_seen":"2026-02-12T21:12:12.228075Z","last_seen":"2026-02-14T02:51:48.070092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/USDC.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /USDC.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 120909\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1d84d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIjwJ93S6yDkV7C4YKqmXosAErnA3CmPMsaclS4ZA0MznfohNbRE94mdBGhpjAui4WojH1TEsYDFnwa3kzuiqvNekEjYspS1RnNSi47PmmBOvtGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120909,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"c76b33ca42c5730ab77f3341ce9764a7","sha1":"2654d0ea7067f6da4d09a20d5d807a46ea193b8e","sha256":"95f156694ec62160f020803c8e8194f9e0b260d638b8674943360458fe318a2d","sha512":"96cca3b422cfe04a989f50dfac47dfb4fb0f2deb55e7bd347c1279f98666dbfb8b19b08bfc5edde0f6adb09a1620108edc82eac2693035d44a85342653e4f73a","ssdeep":"3072:eEuEaDh9wTUHMXRoUmkJ31EswRVuFcor61a+wwGopS49Q:eWE9w4sXjJ3WswHu2or6Qop+","tlshash":"07c302268735e246dda410fccb7749904dfd63bec22c7dc30a89d02ea566085b74e6ee","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-07-29T16:43:34.746349Z","times_seen":137,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/USDT.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /USDT.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 8157\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1fdd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KyN5%2B%2BFNdS8DshOXFac%2F9QQuR5XzsMnFJ%2Bw%2FV4Oh0EcL4gv%2BnbkOB6y1nrhw0pv%2BIlutZG0KlK%2BRlvfapLw311z%2F1hObHDZeoc6E%2BGGRTjfs8c2D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8157,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ababd4ff508c8954ee560176976f27ef","sha1":"84fda5b98a837a6229eee9afeab3fba98e27ddbd","sha256":"ebc257da9422f376a00b3a93553f7080530a68b8c544a5b119027d7d2cb803d8","sha512":"d7b804fba336448e71d586012beaaefeec9b4af76025e99aaceeae8abf5746b2ab9f4673d05528dc3fff22d0292b2511fd0ae7566933f339cea6d58bccb4dd07","ssdeep":"192:I8x0XmsbgeSzCNGVBj6oxNn4B3jWAYc5KtvbB:ItXmw58j6oxN4FDUvbB","tlshash":"2df15c7f07339a1a44191811fd68af585b70551cb873abc28ef98e04694c71bb33f69d","first_seen":"2024-07-09T00:41:23Z","last_seen":"2026-07-17T09:07:02.853102Z","times_seen":31,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/github-83e5a947.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /github-83e5a947.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-404\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DX1K0GB9CI3D9BfoCjH98CIerPOhnxCYQpBaJvvjvHGtTpd6btLtHliVGP9wptovka1r%2Fv24U8HkkyJwnuHqldQ1O9UPbszu%2BYuRnDNgdcXjqGFV\"}]}\r\ncf-ray: 9cd9435e9b2a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08efed3f8ab9c56e458811eaee17730a","sha1":"6ee85f09e0bd51c551b82593a9c4cca9b626fb89","sha256":"83e5a947c4bedde6137a0d67ba1b4a2f43f7e0c281048973567fc7a88cd0a2b7","sha512":"421b58861a96ce8333e8ce587ae503e67a19230ccc4cc855627bd494ca67502c8cf17440c7618156c97a6d96dbb53720c535c8017ac2439ba0e151c4fe601d47","ssdeep":"","tlshash":"3511eb3cf2599274dc26aba5ca7828b0a02a40eec080667de42699b4f1650ea0a186dd","first_seen":"2024-07-29T04:27:45Z","last_seen":"2026-07-17T09:07:02.826452Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/privacy-policy-1a1324f3.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /privacy-policy-1a1324f3.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-58f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98iYic5N%2BoufcNDcM1MEzSJaDJ9c4ZXBlkrC40C0LRhgFQLAE7RsXBSID1B40z9uR8Fb0S42ZCiscFhhKe%2FN2j1TKv0aRkmb%2BbjaOr0CpHyvk8rv\"}]}\r\ncf-ray: 9cd9435e9b2c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3244280079ed9fd3c78daf00d964a46","sha1":"2796c6e7b102999b5a1451843758f68e68246b9e","sha256":"1a1324f38639d343b78e6bb954b9ffdca242acc188af7e5ece73d018cd1b53f9","sha512":"45fee8139d2bb5ddddf1f05278338568eb349b556bd9d12324d8d1264ee1fd66bd74213ab707707e9e0a0f4b441b2a54987c4adb861742bd8f27b62f2b62930a","ssdeep":"","tlshash":"1221b3fe2900937cf90583d6ea1112b07267d0e84fd540b7d300af227486064edb22cb","first_seen":"2026-01-20T19:34:23.939051Z","last_seen":"2026-07-17T09:07:02.804805Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/inter.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /inter.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-2848\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2Bui3ZIbXo%2BizKoNv8v601FDWzJAN1ofnFLoLau1sxGuomTcO1mJU2V15rFZWnp2B7rijG3THD2BelpP6Afyi6mnui3NlzD8fXBksWGD4cVGuhiC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e1ae51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10312,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"52a282ca6afc823fb7fbac606cd0ccff","sha1":"fcf488e389b54a9e73dca39c7cd057e89ef4a61d","sha256":"60636414aa7137ff5c197193a29673fb8bbc59df93f1f6debb0ea28b8e96a0ec","sha512":"d33ba135c1d4174d2d43771e158a8c91b39ab9bc5b4970e1d1f85fe53d943665bab3e89d638964f8492c548c561b5a3d470b8335642f3a9677ddb0d450e84b7d","ssdeep":"192:AEUyLzUJ0S1xA946HP2dKs+7ohsEpzy2nt4QV/etM8MpEyEjJczGXyEjJczGpyER:+wUJ0S1xA946HP2dKs+7ohsEpzy2nt4N","tlshash":"cf223620292f5b01d0168d3277dbbf127d2d5a2a139906b13a2e095c9fef46e93c1f9d","first_seen":"2026-02-12T21:12:12.264957Z","last_seen":"2026-02-14T02:51:48.074221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/vendor-860cb88a.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /vendor-860cb88a.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-3fdea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BRv31HS3J76X5cw1HGrNENFt7SFQbA4QCWW8igUxay%2BV8dZ1haU%2FGXtTgASEDS4MCsPkeToh%2FCkqBLQZOGy%2FbAJozdatUJqR6cZqTsTw6sEDuMeZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2ae81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261610,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5020cd10a7238b2c1742509370af09b0","sha1":"649bcd6fb6722301686f35cfc8930c3264f6845f","sha256":"f5e24a97b8931848527732715a9e7057188177679fd37b8e9f11e81c2f404c75","sha512":"4e686b5fdf2fa1e6a4c657eb60cd483e0ee5cfb78a8ddeda3e6213b3df4c768cbcad903d6fefb351f4e4c45e393c4732481bfc2284534ced79fe234596f45b4a","ssdeep":"1536:OP8taVpVRxoIyNBi3MFYaQj7r94BTSiWDkFqPCyVOdmMJ2E0ZIcFgvt1Al5ayz39:t0UNqOFqUv4JU2","tlshash":"02448599e791917d6f17b67c9bcb96d8b23ceda0dc01c7a4f201911809c3bf50663e2a","first_seen":"2026-02-12T21:12:12.237797Z","last_seen":"2026-02-14T02:51:48.075699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Owlto_Dark-fdcaab93.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Owlto_Dark-fdcaab93.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 35607\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-8b17\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=80Q8u2XFw2aV4DCDITecHHXKxFE953wChiW43Lnt%2BGjt%2F3vCsejNeNwwV4RaKBmCwjTkF2KqNNDXOt2TxrgNm8HSJCQUxgd7fk4me1hDitLacKq5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e2aee1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2781 x 581, 8-bit/color RGBA, non-interlaced","md5":"246310f507479561a839d00adeb82b79","sha1":"a30c612278037ae9a255e1758e097afcb0b56b80","sha256":"fdcaab9310e72eeaa4cd38636d9c2fb9db01c5d5b534fa03da69d7b8d6c15856","sha512":"709f49f3f8860a114637e193fbc81d092ed270581f06e193144dc2003fb4da722829059d88292b8e27ea7bafff71dbea7e777050a1e9e94ab072d74b366293e5","ssdeep":"768:XYjykU27SYG1PNy7nIxzKxPxWS0hsQbkr2aRJAFy/:XTF27SYYEVYPXkr9RJAY/","tlshash":"22f2c064912b25a4f2327bf68edb4a86fb7c08f40075db0b92571431ef93b465193c6e","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.850456Z","times_seen":20,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/5a6df5bef5c9a91b1151e5d6ee055d6081b5dc71.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /5a6df5bef5c9a91b1151e5d6ee055d6081b5dc71.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1f5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhufZFrnJ3%2FZZlGEUgmZs9GpYmWa1u%2BWnchgM1q7fYGrfHzQPAaZY7mvGWXHPWo%2BFYYhlGT1%2BCDw1tzJEed%2FXLW5r6zzEGYBKoZvyCuhTN70yDmC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"bdb2f13d014b1bd95c2ad440b1771f1e","sha1":"5a6df5bef5c9a91b1151e5d6ee055d6081b5dc71","sha256":"c3e616649c3b81d76ffb97602192dac13046e4c667e2ee6fa38114fe8f6e5edd","sha512":"1e122c26cdb5d651fb00a08b680c9b005dcb72359b7aa435a9577ff945a8bc9e7fa4ed84d87c86a3136df05d804ab8007b431029c166e585c11c6c66539fa450","ssdeep":"","tlshash":"24f00ef4d28093ab4f4d63ba76cbc222b49d118b6d172008290485abae5bc5d95663ff","first_seen":"2026-02-12T21:12:12.201275Z","last_seen":"2026-02-14T02:51:48.077911Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/if-moon-ea5e21c5.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /if-moon-ea5e21c5.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-224\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xoKtjriCkFBPs5WykNRcHjodIKbINirswdaeERmQFQwHs4D7EFuI98E1ZvlXJt0%2FsPEuBBHp7OBZkVuad%2Ft7d0P3I89mLxLu0wFCZvWYogDTYOb7\"}]}\r\ncf-ray: 9cd9435e8b201525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63fcde712fe1ae8aa8c14c0207e01664","sha1":"01b72981e261f2fb62bc62a0f2d6008ee36a744f","sha256":"ea5e21c55f38b10ee11c0e0810a54b1c5b5e71fd7ff4965ae2ed50c54b05b757","sha512":"4b3fe00923f29e162c3a189c6dde5c16ef7dc1a42e3e271d061c6fc17ee47175422fc9793e4ad2486d3163682214557f6a1038e3daf84a8ae0f00e4f89494390","ssdeep":"","tlshash":"15f0c0d5efb6e00583cadf3ea3785c56d44258f365ca488cb469191d6382895d401a84","first_seen":"2024-12-15T20:11:38.681912Z","last_seen":"2026-07-17T09:07:02.820945Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/0dd34a125c31088a8c6b0a9d7f74e0dfb7fd0c32.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /0dd34a125c31088a8c6b0a9d7f74e0dfb7fd0c32.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 485\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wV4%2FI39Pttte%2B%2F90Tnf0M8X41%2BdVjAUhwVcJpWHsjZvAR5qoY%2Fr9DTJYxL7poKnNMXeCkg%2BhstJVvw1BWUnnWjgfgkxLI0i9jyesRusqBR3P6CSq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"12edc39ed344e2003bbc2dc1c3cbc175","sha1":"0dd34a125c31088a8c6b0a9d7f74e0dfb7fd0c32","sha256":"b45d9a4d0a0f1f25d2eb6a29ccd0bd39ccd6b55040b8b4b04f9952ab55079a75","sha512":"8d786fa70e4e464b94a0ccf3819a29812bf3e1eeae16737a1682c2c69b64434acffea7e132141bc03db6905c9b1604d9d326407317e9e47316ef76c8a61121c5","ssdeep":"","tlshash":"acf00ecccf2120ab44e215640b8383a8637f349e1b36926cebd61a748502c6080e9127","first_seen":"2026-02-12T21:12:12.221718Z","last_seen":"2026-02-14T02:51:48.079771Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Ethereum-1.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Ethereum-1.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 9954\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-26e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zi%2FxkORY7iiD%2BLebB4Pu424P3Za8wjHIDyG14e%2BfGtJiTy8%2Fwy8%2FO8E5KlFog0IsU72cgfJna636q4mHKkZJlNwjxlSVvsr3jdpRq9gJyfnIfKCw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ba5e4e2898869ecb36a49009a8858549","sha1":"aa940f1c549bd8537863aa03286c4d4bf31a73c7","sha256":"fecfa9f57e3a50507e2efe2d715fffdc0326de55519fa55d52bdb4e095eb72f6","sha512":"2466ed8517cefea9a22b5a92b646119f52f34504dd0c1e1dc8bf8d5d94d5f747aa290cec568aa8bcae53c00331884d18f2aba6dc2b0ed3279fb308e2a8cf8f33","ssdeep":"192:20pD19CCsXCwLMT2SCKJYRxiXZ/L10UthpsU8S88YROD:20paVD42YgxgZqaps9x/S","tlshash":"ca22af26d0a697ea8217b109619cbd9f49112bfdaf7ef40277fb053e2c3dd0b0294165","first_seen":"2024-07-19T21:37:03Z","last_seen":"2026-07-17T09:07:02.81362Z","times_seen":22,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/iconPark-repair%201-9bdbcb4d.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /iconPark-repair%201-9bdbcb4d.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-346\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLCnD39uGrcHeCEcSSmtKHqP7Bw%2F%2FKDnM62%2BF0BvJ%2BcEvPf0sWqAVbFgVkJuReGfT%2F8fLNNr0oe6gqfw74Wm%2Fuzc5coA2dRXN9sIYKVgXfJKQQdT\"}]}\r\ncf-ray: 9cd9435e9b2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d179ca57842d6872ddd0598d47274aa4","sha1":"762702a4cb86c6a542bde2d0ac280aee7eab8af7","sha256":"9bdbcb4dbcd5a37e588d8203d14b42751c0e2dee2fabc8dc400da7e5816374fb","sha512":"21a27e0a4a9407aa4db9bf197e3b9fe934886aed91dc8b10d275d062a005f15c356d916d92a4d668455d109a8d603f79d166c986f8caa0f83b63f14e3c89bf29","ssdeep":"","tlshash":"570126ac275f4d3cf4660b60eba67239143419fa8a0c9405ac7b2874fb0179dac7b9d4","first_seen":"2025-04-09T09:30:49.406266Z","last_seen":"2026-07-17T09:07:02.799919Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/index-cbdde4f4.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /index-cbdde4f4.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-83c63\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qgkddVO2J%2FJmqcGhSsyXFWG%2BUD%2FQUeNT8xcEb1e%2BcrqncDSgs%2BylSjQ8YDYGJjBedhJzs7nRwstd4UoX8QhvujRqKToEa4nBtUuWLyTOlp2votH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2ae91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":539747,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4eb69bb290eafdd9f36c1473124999b3","sha1":"ddce982dbc1d53c8b31d24512d129b33b0740f31","sha256":"b9f296924fceb08c134ab21fe9d91fd6fdd2d2174ada328831dae5c2f0e07a50","sha512":"51141e115df2a9df1413793199eea8aa619721e0cdab8810e6b4df7106dd62a9a5b384ecb0d7218b5622c826d74fe7d69406c925c69e7e428f8195c1d8e97a1d","ssdeep":"6144:nMnLbZyz3K/cudI45nexqpkePwAgp/vXQkpQ:I5neCke4Agp/vXQk2","tlshash":"54b4432272dc240d623fd53aecd2fbd85b2b7362e2011638b4a779284e530d6f677a54","first_seen":"2026-02-12T21:12:12.270731Z","last_seen":"2026-02-14T02:51:48.081603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/TextLoading-e3a77e6c.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /TextLoading-e3a77e6c.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-3c19\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2%2BzWliDiFq6pkRQj2QJZazG7Vk2myDrSFHfA9MivcX1j7pKwugD050y%2FxHLem2sn%2BBJdKJyKtgoH%2FeGhgV224qfsA1Gcy7GPkMggXlJQUSygefU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2aea1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15385,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15384)","md5":"877058ee4b64bf7e2426bcb4c16cf7c0","sha1":"5b0d778abf8934d6b1cd231ceff93b3304f9de2c","sha256":"e3a77e6cc58b0c7bf4cd70e7083cf256816d4b18670eaf4a992d418d00d943de","sha512":"a6d13a016f4f608cbd9dd157792e37beadd41b9f752911c362df8f180d3bf25370f05c15bfab69b14b879da8abbe728a033f56fa874c75d5a49c8e67e3f0860e","ssdeep":"96:Y0MIpptrnrqPgtcBTr3BNsFIrwr7FYFILltFm6lIrOyIExtOtKkrXZrO43hHgsZk:RDzGGPxyvH6nx8mqmK6c","tlshash":"9262799ab1cc2288133be93decd2e7d44b3a3313f6005624b56776249e531dfe932a25","first_seen":"2024-10-23T04:28:21.992534Z","last_seen":"2026-07-17T09:07:02.853658Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Bridge-1e76ad8a.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Bridge-1e76ad8a.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-10f7c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R3KRAehuu55lf7R4jB2WsFKnu%2FzR5W9KhzNSs%2FOJWaxrB6dNGVPuGHCgyUcPSOEAY6EY6jW1xBhHTeoUOfdN%2F0Z062Vq2eAl4fpyH1a9Jtq8yGDo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2aed1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69500,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e8b6bbb90374cfc12781e37ff16fac53","sha1":"b51ea73011945308c29b6aae462e09aae110dd63","sha256":"43ade043f5a057a6712489c14e1d38a7b318b7f0cae5ba1f52a6f3d70450f2de","sha512":"3e69fdaf21b66716f75694b4fbc5aec8bd7e7e0f14156c1e8ee6fd687a2fbdff215348292f685c8628e6f6ff77d4084a800a1bcfcef6ed5bf17578c16858cb69","ssdeep":"384:rptim5WvXjXRXkXaMX3tp7hmX4LB1CPdwd1WmZ+cxskKsF7:riXjXRXkXaMX9TB1CPdwrfKsF7","tlshash":"17631f9276cc251e113fda75ecd2e7f80f2ab352d1040768e463ba244d432eae5b7b25","first_seen":"2026-02-12T21:12:12.271826Z","last_seen":"2026-02-14T02:51:48.083354Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/97a3620b0071c6793f06b002a708105c78ad76de.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /97a3620b0071c6793f06b002a708105c78ad76de.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 2054\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-806\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jg810Tf3vi5FCZ3%2FKJ82qgD2yyKdy576mtYGGjxzahNyg6iMrvKVO5RnM4nUZpQEDhFE1rcEoC9ot%2Fqt%2FA2UhNNRfnODcBsQu70AZ9V1dvX96qC%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4aff1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2054,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"d80c872c61b82e543588be9021516d24","sha1":"97a3620b0071c6793f06b002a708105c78ad76de","sha256":"27ae2fa133ae64168c3c80a71edea617f6be26397ef6c046a942fbae2de68cd6","sha512":"0c66f13ea22aa4c1ee42a340b72b90f4e4e44ef5edd5c24ee3521cc86673c777de0237172e451ecb82fb4bb5ecc93c3cfbc746c4f23a1960a81fa481c3423b22","ssdeep":"","tlshash":"07411ae103981691c5f8612f2ae59a9cf2b747878df8426172c3471a8c8cd029993393","first_seen":"2026-02-12T21:12:12.254021Z","last_seen":"2026-02-14T02:51:48.084216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/gatewallet-d97099e0.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /gatewallet-d97099e0.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-158a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N04Q%2FxxVDkBrK2TERZ%2Fg8BH5ZtQrcxBSlenkGmWZxzHXDvn19%2Br%2BhsRPU4qGvJewPg3LsJqE22OLo0m6XOWPNdfHBTRTP580xpuMe%2FYXx%2B7nlq0A\"}]}\r\ncf-ray: 9cd9435e4b031525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5514,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b736a68278d280561c3b01a8661d6c04","sha1":"c8c97c20b0042c827ae01c274d3adb2685fb6482","sha256":"d97099e0db362f6a228e6cf2af95dd42bc94f33477c9fbe8f8c9f95a73c0db62","sha512":"b301ff444bda0fed80d3a283101699152b9ed6645ded8ea5927a619bc73b536e08259d4ee62d719dc4e691c060d4cb710058681feae7b5e87c2809e2ddf5548b","ssdeep":"96:HczNnX8fSKDJ7Wo/I1KhOmYFKajwoZALbkxk1E13/Rg0UQEOFOa+0qUvA:YX8fSKDlWyI15mYFKavAU6E13/Rg0RFE","tlshash":"04b153ed2e7486b4dd86a3daae12009d526b84fe66804774c28cdf06385b4ddccd5fc2","first_seen":"2025-04-09T09:30:49.354406Z","last_seen":"2026-07-17T09:07:02.835129Z","times_seen":10,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Zerion-6caf4d5b.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Zerion-6caf4d5b.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 4579\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-11e3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KwZ0HXaj%2FhlrlmEtKaUDKF9kQ8tNEfkyXRxZklnyDNY2SSxJ0mFCJNMgS1sjCC8KmfBb6wJBMQDz39o8xp70brscrLn061aYqQ3ejozZ6nrUvN6x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"d9c51e4fc9e203ce677670f22e183c2a","sha1":"bfd06f176b73cd906de99b0b12b39a41c6d80337","sha256":"6caf4d5b416305359619b9b2dfad581f352f5efd5037a2f7b8bc1e9ba2cc9e7b","sha512":"1d6096447e6cfcc9d3b5022b62bcda0ccd29d0d2f64d01bd61f33883642e414f65818cd2d639b6e4753bec927c7fefebb2503a96e3a52890444c9c04c54a221e","ssdeep":"96:CvUUuqXXtYW1JRB1W5e9Gb6bFtBbzWnf2hJN:mU4YW1JXA5e4b6P//","tlshash":"76919e842a623ed6417f02c1f733a94999f8563ff58da0a89749cc792f8c9918c1e074","first_seen":"2024-12-15T20:11:38.617976Z","last_seen":"2026-07-17T09:07:02.808215Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/eco-26332651.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /eco-26332651.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-791a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKp1OFPjt86O0Oi9LidhkD31Kw0w2DuXCAym%2FTzLKGMqiX%2B3p%2BQ8p94eIK6rTqtdjr1cioLSRHUS5XUBjksk9dTHp6vL0xIHugzYkC8Bc3fdpJj8\"}]}\r\ncf-ray: 9cd9435e7b1b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31002,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f2465cff41b4e41c02178274a0d643a","sha1":"503268affa94b3afee90127f2eccc0890d5863af","sha256":"26332651dff9d74f742a1b3b0019d87661e7b0b1bf886ad88dc0cee856feff0b","sha512":"d1a4d26237a1a9228a0255c6852c6dfb126e82c0f34a7df2cafe764600b1daac8c8f7e5dc7f457b8b5cbb22592da4498351274d0452a1c5411bbe25f4d07041d","ssdeep":"768:LazaRPgKJB76lv1eWMLmMHORrfSY6V+wJzK:GaRDFWMLBHORrf+K","tlshash":"5cd2cf9c179043e47d6f8eebde1738e071ab6cfb7c895180e523e452942b6e28c09db5","first_seen":"2024-08-29T18:03:35.893204Z","last_seen":"2026-07-17T09:07:02.834214Z","times_seen":16,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/4fe43d167ab500431f4504353608c4d8d7093949.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /4fe43d167ab500431f4504353608c4d8d7093949.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1056\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-420\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5blfZCVnOHHnAZ2QAXGEcQeM%2Bn0GvZ%2F0ay8OQEaOdGHVcnIFOwbfHo3J6EinZl2K8NcRwnqc5j6oEdIE2p%2FJfcDph4GvUjmubDMhZkFEdyJATAxZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e7b1c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 52, 8-bit/color RGBA, non-interlaced","md5":"70f67d481316f5bea8c61922a1022bfa","sha1":"4fe43d167ab500431f4504353608c4d8d7093949","sha256":"a4319aeb06c6f5a7fd59be081c6f5ebcd6bca2b1e33940450066053795d240a5","sha512":"439b7b4f427642bbffedca4da1de409cf892bfc350ed145a90f00db60eac665c70388b162755b5608b644a0cf8bfb5415ede7a478a6efcead91c22d696f71b2f","ssdeep":"","tlshash":"9811e5cc6c86bc38a864669ab2204860ee230c4b175ba84fba080bb1ca6d404022f2d2","first_seen":"2026-02-12T21:12:12.233245Z","last_seen":"2026-02-14T02:51:48.087821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/bank-837b09df.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /bank-837b09df.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 313411\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-4c843\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTUPb02XzjO1z1zRTgnvc4kxjxu%2F71S24GF9BC7G3diQOUyl%2BDq3tqXhruRp%2FVOHGDNNMoK6VUGDuUu9vSbUz9LSLCD9Xx%2BpV0qkHoaEL701LY6E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":313411,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1104 x 276, 8-bit/color RGBA, non-interlaced","md5":"6f1a92a22a48676313ba297a2381bd82","sha1":"3604b4e60b3e946315315777d396426fff8c476a","sha256":"837b09df179fcae5a0a981d29fe1816cf39f135e10115828c6b11e2979f27d03","sha512":"6f14df37cb3e9a2eae5cedb272d27e91080844fb36143b555cb243cf84e5c92628dcd14d76cf6caf6306d4525d109f5106d1b5c06c3641e8cdaafc7e2afe60dc","ssdeep":"6144:R22MXWrLTCCLm9OqC49Yw6NjyI9Z5WNN2176edq7sXshVbq:HrLGCkOqCagBZ5/1Gn7sXsC","tlshash":"0c6423e9e0b15581cb8e113eba5504387302ee28a43cda3c795a9417529137bbff39dd","first_seen":"2024-08-29T18:03:35.888074Z","last_seen":"2026-07-17T09:07:02.805889Z","times_seen":15,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/WalletConnect-eef2ba73.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /WalletConnect-eef2ba73.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-874\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgSVULyCt8NViFLasUFOSmY78%2FonUh2tdKI2gq%2FLcG%2B0LAwGHjOgr2QkpS9ekUvsC%2Fo%2BPALzRC09HslB4zY7zqKhbVe%2F6Xn1gnAmpZFX3m0suIDu\"}]}\r\ncf-ray: 9cd9435e4b041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2164,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2b0d98baf14cc260c0543113a01cdca","sha1":"05cb9e71fef27b006bfe422d1977368659d6f1ad","sha256":"eef2ba73f56ce09d786cdc4cbc6f2b9b69741b50e50209acb3c763571a498b1d","sha512":"7060d33ce3958b679622c85cab1840af9d50400e8009c826c0c5955c7c0795dc41e2b8d7321dce9a0e3f9f77cc6a6b986a37dae4ddb9d10229d84a17b4d15a6a","ssdeep":"","tlshash":"7a41ffeaa79973e99404f7d8c705a1703faa21f46a638f661fc617603a1b19d9ccc4c0","first_seen":"2025-04-09T09:30:49.325111Z","last_seen":"2026-07-17T09:07:02.842399Z","times_seen":10,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/b48c7936eb8abcb35b52d048b4d4548cdeeaef12.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /b48c7936eb8abcb35b52d048b4d4548cdeeaef12.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1028\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-404\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FtkN6ykM9DfgPvBGNIJonOqjtRQyQTgEDF0gNe6SfppnDWvXP2c5y8zXAE4XzUtS3NAaH2c1qqdPYfYEWxFAE1j7W2wMNcf4HAQHpm%2F7oJ12AA%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e6b131525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 68 x 68, 8-bit/color RGBA, non-interlaced","md5":"15c728d8a49f30d444a92f8e9cf2d4f7","sha1":"b48c7936eb8abcb35b52d048b4d4548cdeeaef12","sha256":"e0b747af2a73fb522ddda2a9c164f21d59e2dc8662005a7276106dc818d81c9b","sha512":"c30192b190159c03ca69e17aa8d072a655aa37d545ce5bf8f564a2ef250b6720da05780c5c4e2e90e2d0383e43e860ad420df127f8fb17ff309c3f1491581133","ssdeep":"","tlshash":"80117543f61b8df77c0250945a607643743c59d58549a4c42e196d4ab4b5ec2502c2d2","first_seen":"2026-02-12T21:12:12.234984Z","last_seen":"2026-02-14T02:51:48.090495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Beosin-dark-abf544f2.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Beosin-dark-abf544f2.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 53344\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-d060\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YekdRTaLan8pbWoqCPTITePXRabG2E14p9HdkoWt3Mu02pHrQMDLM6jMv%2BnjnMRa18lntAmEktJkgYMz6f%2FN2zprGKfVeehSfcwYFc8GhshXsIYC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e9b301525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1178 x 361, 8-bit/color RGBA, non-interlaced","md5":"719c49b921690628d500c5ed7ff5c53a","sha1":"198d542806af8856a195bbd64744da247466ca5d","sha256":"abf544f23c136f53ed38ac986e42d7053f6ff674bbf6c0acc30d945d835373d5","sha512":"0e7ee3a8bca443fa2ee5383bdf457f3e1c40e3565e4ae5d9090c10916dbc1b9c7a19153383011fd208faba2216614082a5b9dc8536d55ec17e84b3ca9e70c150","ssdeep":"1536:/CcEcRz4SMdCTvEeNbeCe8xqVS/maJ9I284:adc4SMdC1rxqi9IF4","tlshash":"cb330297fa9ccc7bc50452c934746a2f8632a770c3f5daccda65b0ebed00270569e285","first_seen":"2024-07-29T04:27:44Z","last_seen":"2026-07-17T09:07:02.831769Z","times_seen":17,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/cb0735c939808c178d1c44b6fa931952ff339b25.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /cb0735c939808c178d1c44b6fa931952ff339b25.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 246\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2FV4Nby7E2cDCjPb1MP8IWh1grrFzj2MqMOvFcWoPKxOucNfdrMjAcB8dIJBJuWm4kgbxvLXN0pfOlgxLufvOhqtzY2HZHOcrBZ0AuezYyjGvrYY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"0f996b210c1e15f2378495ae484020bb","sha1":"cb0735c939808c178d1c44b6fa931952ff339b25","sha256":"3acebd7ac1f9d487d5397660b7e83fa2bd84b2344f8d73f8fcc1b081b21a6032","sha512":"41bdfaad5e076d3d97ff1a3d78caa54028eea118bc32c4311496a17198a42b32c5c137c4fedcbbc42fcf8cb4148b010255c0b23d8d077a133fc8e9dcb8b3b6b2","ssdeep":"","tlshash":"c2d05ee7afb5ac9cec2e4d7ba1765290e16958aa040b8904a94066644859d89680ab82","first_seen":"2026-02-12T21:12:12.191237Z","last_seen":"2026-02-14T02:51:48.092507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ae7d04772ed97a2e940e51e53cfe3b9743f32911.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ae7d04772ed97a2e940e51e53cfe3b9743f32911.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-2c6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QmsBPZ6eXbywcZk5JbB%2BmltY%2B7GFl8Ed8ouYn1GWQNuf342alGt0sZIIWVxdpn68F3OvZCnhixkJLsEL5x2GOGD1kNwT5EzTNLlH63qjECIgGG5%2B\"}]}\r\ncf-ray: 9cd9435e5b071525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":710,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d46f3b06d9fffd980c52a76cab62c89","sha1":"ae7d04772ed97a2e940e51e53cfe3b9743f32911","sha256":"22c2ad7d990bfd8a978a08c71fa0bc8bc354535d722890baf5d094fa8a9d7c66","sha512":"21092d07a9f6098673ace12e95867822aa670d03d6e5175aca2662593b036a82db01c4bcc04c4aac5557f5e052de49973db1125d08ef45a3361099902b554802","ssdeep":"","tlshash":"b70128b5e5951835a2000a3b1f0e611754ba14d63b86a86cdcc82a1ab0bc56f1cbeef5","first_seen":"2026-02-12T21:12:12.255582Z","last_seen":"2026-02-14T02:51:48.093332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/bda4ad389cdfd12dfa0176a977b6193271822c22.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /bda4ad389cdfd12dfa0176a977b6193271822c22.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1222\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-4c6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y17Z0fAF9CiZ2rH64dfbk2Qg1PxbpPaKz%2FGhSeVgNG0Bpisbh8mPP28yoqRfUCsEQsfcycEnjnm5R0hPlBu1hlB5g4QRa8veCKkGAEmCFOATa8lQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b111525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 82 x 82, 8-bit/color RGBA, non-interlaced","md5":"5df7ab7c63067c20a05793ffb61ede0a","sha1":"bda4ad389cdfd12dfa0176a977b6193271822c22","sha256":"755130be706af3c08949d484daf41f86f74f11f0098c0d8cf20cf18675edb28e","sha512":"c3219e11946e7250e5fda4e85fa0cd27c08430f549d17c1a3a0e36d97a123f03356ab8e381b9609f7e8bcdfdc476d2254edf4ad861302854ebf0ce48c2186d0d","ssdeep":"","tlshash":"bc21e779b31c1547e83ba24d032e010d325027afb30c298d34aa7c25b7f194a70b3be6","first_seen":"2026-02-12T21:12:12.217703Z","last_seen":"2026-02-14T02:51:48.094705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/GitBook-f6d469f5.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /GitBook-f6d469f5.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-971\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBRHA5UnWSJlcm7D62rpnsKdm%2BSH5M63vC%2BzjyOxXJtekIj89zPSo%2B2awBnwz%2BTsj46E94E6Z0608VjM%2BACRuE8x8UPsgZ3YEDnpxhQwA48cwlDz\"}]}\r\ncf-ray: 9cd9435e9b2b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2417,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0aa00139d39ec969a37107fa79dc4c9c","sha1":"6fa103b4e688c7fdf153167f94c9624c7255a8b2","sha256":"f6d469f5ae8173fc89303bcd6efe6301270fcf54ef1b06a5d8c62768110aab79","sha512":"eb809d74e01899bf6be4b8f428eace2ce15f29e9aa14d7c63ad4853358224ebe6a05f7f25b87031260134da78e52288f1cf54911f7c5226909dd5ab7cf0e807e","ssdeep":"","tlshash":"7641c5e4e76848f8940c475c457a888a724f30ff3913c13c82af794ca7232ab8d9251a","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.807154Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/e5ca302f02142282ba66388c6b8b8f3cdba9d551.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /e5ca302f02142282ba66388c6b8b8f3cdba9d551.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 3566\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-dee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ms%2BGhTeSkAdZQhgR79DlFT0mVECNBV0n2fL7DHjgLmaqpgGgvf2lJI%2FHGIDD7ycHgJN0TLv3RV%2Fa6LXvCj6nRxtS2owheCSkyNoMIpV2AjcRjAl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4afd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"73801ee24072345e618e5417620c0605","sha1":"e5ca302f02142282ba66388c6b8b8f3cdba9d551","sha256":"3ded453896fe33ecf5aa7abd563b686c995b5419cea9afe886abd8f74fc75c04","sha512":"6c77f1d2054df57e17a99e0a43f906d0f4c993e800dcb09dbef618e13ae5f1cfa0461e597925e6b5968f53fbfa7251d34ebd4977a1537a2984810ae1739d02a6","ssdeep":"","tlshash":"33717ea090342f3b09f673266ebb26957cefe8ad7104e3a1e8b15352035483c3771875","first_seen":"2026-02-12T21:12:12.209653Z","last_seen":"2026-02-14T02:51:48.096484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/272e15dfdfeb81bfa8c523491448ab7a6f98372f.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /272e15dfdfeb81bfa8c523491448ab7a6f98372f.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 3615\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-e1f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mz4iAUkJpeJ1RYzEhNtnZAJX14cTgBCQYx3fOiLwAPlXoOwWgRpBoSbwbi6EwBohb0Jvh6ENb4knI5TjeaPsEsWEhRXzEO5xnKUNUkYDJxbJ6qaX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e6b161525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 81, 8-bit/color RGBA, non-interlaced","md5":"80c933fd5c43328e047204bb66c62661","sha1":"272e15dfdfeb81bfa8c523491448ab7a6f98372f","sha256":"aa1a27005e3035911e34d7d99b2f388994551c4d49dcf0f6557fceaae8470535","sha512":"5f7c82a7b886677c19714d03b970336ef439edfa8a0a70e2cb0505d511f6cd3384bfce15d8381d00a0a9937662444ea7d0c8cfa92bc6a656e0b308c1050879ea","ssdeep":"","tlshash":"bf71195a55b340de88b6b3837236616f6c38481c4aa5adea64349f0db81768c497a28d","first_seen":"2026-02-12T21:12:12.195196Z","last_seen":"2026-02-14T02:51:48.097393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ctk-light-c41d4620.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ctk-light-c41d4620.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 111977\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1b569\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQwBFoy3ozzLhZJIT0mzkvIJt4JIxA49YKWqnk9uA4XYCRI5jhK3M2%2BEENo2CW0DB7Y2sS52fT1JWFOU9VPiJ0lOSi3Vev8SFOEkVI%2FoOMWy9Jfx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e9b2e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 617 x 161, 8-bit/color RGBA, non-interlaced","md5":"4f8922688b4ae7731d06f3b8da622615","sha1":"33ce02f6bc3ce4712ec054f403d84cdf7a614a74","sha256":"c41d4620012a7352db08f03ac2ee285056a75fa444630408190ae1c1bbadd551","sha512":"ae5d6709cbebab92db3675e74ab16d77bfacd939c587528e7305db501716f5f6bb23274777928793f12ee8554907b99199eb52a1d25edf812f08d95a70113c59","ssdeep":"1536:tHDSM/S0zLO4IgPeSm30C817ZNIL2R3MtJJWTKmqq/umF1m41a4C7gfsMTOlhM:tHJVlfzQ0C8hILS3IJJ7mqqjFOl7DM","tlshash":"d4b3f1d2c5074df4f10420f9ba918f4e7ba19a6f452e1ead07fdf2214d8a706bac99c4","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.857321Z","times_seen":19,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/index_1.html","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:21.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:21 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 44\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nsnusVKLgHgyxfAUUhMk%2BK%2BUWZ8iSI%2FO51IRNhLje3q71YsP%2B6zzxSRA8K30m%2F6lwSLi%2FDbJn6MMix6oxJs3BOmE1uSr%2Fk%2BIRrTAbJL9jEgJ8Byy\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd943614b801525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"997c4afedfc6d4cb0977a244d89d2a80","sha1":"4a1b8af33c27b4c26bb4488a0d9c54cfe237bf01","sha256":"5a9281e0117f81ca9c061c60f75f9cdb29440899ad5a905831f4cf5b6d54a9dd","sha512":"abf836b3304af762a47ea24f09aef1f7699aaa86b7cdb32b0619daf7203705ae7a6a5127969488fbdc4f5876120b794a65d2c37ab9f2b4d843d95928be50092c","ssdeep":"","tlshash":"acd097e286021825080b73c03bc4fb4c080aff6cf44028c87a6ce090cc2b1e1e803881","first_seen":"2026-02-12T21:12:12.23236Z","last_seen":"2026-02-14T02:51:48.09907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/iconfont.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /iconfont.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-577\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JrkM47%2FRBGo5PzpRXGoN89o8lykhDr3FQsi6vRG4LDopZM%2FZrH60A0DMmzcfEGKxGFkgdm5qnjeOCmWuv8NxjhZrP0QS072tZ%2B9wY%2FmKf%2F5umQml\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e1ae61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e70f416e9d113079bb20dd9bb68860af","sha1":"21893098135e122b50c53115bc8a847a2b5161d4","sha256":"033a5deb8483d963303bb071ba3f9c68e66dfdcd2b30b71ab776028625b5f4e1","sha512":"d5afe181f79f74235713fec1c46f057c233883ae5c136db1f88ef2893d841a44c3685c0fce7a35c0fc6d1501702c9c0143c7eca050ae95387b00b8d93f1087b7","ssdeep":"","tlshash":"792141e488bc1c705309e4d12346aa21ef09b1a98d875c5bf2ab7c9cabe32108191bdc","first_seen":"2026-02-12T21:12:12.280663Z","last_seen":"2026-02-14T02:51:48.100009Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/TokenPocket-c7571ac8.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /TokenPocket-c7571ac8.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 20264\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-4f28\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHEZMB3XVb%2Bp90XloUq%2Bn2U3AD%2FOJtr3nO31W7aTaXGQIWergtg5Sm507HgbwWw%2FahCFkuqELw7CSUd%2BR3v%2FI4lEPH2l%2BQ51A%2F1vE8OtI5pvREZC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4afc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"afa96478c80e8a90c02cf84a77f6e9fe","sha1":"3f184dace740d30a4b32785ec2b065a60cccf40b","sha256":"c7571ac88b6542e10cf832a1c920abc1bca52d3de3cb1af3b6ad00612c80e545","sha512":"44811751d4da873a1be5498bbb08d4c207a485e222f682186f082bb29413601be9396d525ee5ec4ca28358e7ee475d3eb0d7b8dc636e1d9facb032f9a9a08d32","ssdeep":"384:e9CQ1ggCb1Ld4myPthzTIcHNxhb/7qM0bWb3EHtzni4JIjG93NGv+fDOe:eQ7wNzTl/dr0qb3OJiMwW7Oe","tlshash":"6d92d037d8424bf8e96fad9165a34f847e9268e93ec5071ec9a42cc493087fc6948f01","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.798685Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/91e8025365291e8d7acc34ba89c75714372218a2.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /91e8025365291e8d7acc34ba89c75714372218a2.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1198\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-4ae\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQCd0aD2HxKj7G6iuB67MfFHCNDtsa39Lhaw9V2iaGhlWN%2BAKrHrDG6tYNoBEQC3d%2B35aWMbTjLDO78Is4SoYrbomGnssi93qnmEOc2aCXSqEfUQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e7b181525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d35c3dca23d06004520e5bf79674f801","sha1":"91e8025365291e8d7acc34ba89c75714372218a2","sha256":"341f5f2de7cbb1bed9211600e89aaabe2c6bd8135a28ad403c3c4fdd43d2352c","sha512":"9e0914f93320cb95e26d836ad637fbb3a4d34caa5ebfdc18b3e5d6558ecba4e17dd15e32d57f4f342f7e4e20ffcf0b6b947c828645e148fc00226603d8535e9c","ssdeep":"","tlshash":"8221b4eb45015c585eee5e061a3bab359ce9b0280653d4a12e00386a162b96c1deb7bb","first_seen":"2026-02-12T21:12:12.176171Z","last_seen":"2026-02-14T02:51:48.101575Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/if-ui-note%201-ebe94958.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /if-ui-note%201-ebe94958.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-491\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8CQpZ3K76Saz1ddlZvw1b9h3RDfHPTmACiIuI19IAEvNm6QhbUaVIG3tiHThSz%2BCkoch7FzfZFauoIBlGAoitPQmA92lSIbLMJbkd%2BbLfJje6Wq\"}]}\r\ncf-ray: 9cd9435e8b221525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1169,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31c25a35bbe68661bee9f88ee4ba934c","sha1":"f467c7fab8c8318dc9b43ee9087fc4ad59f20e05","sha256":"ebe9495894c3c3c8a468e41474189e145290e64cbd0cbff415caf32dea332186","sha512":"280ba81b0d8388b5c3488acb72c1ee090d2984e426f465ce224b3d1dcb1132cbcf58aff7ec6061f940bf7244f3e2240034cf30191888c2a70078ee4ecc2181c5","ssdeep":"","tlshash":"de21c0e95b4960acd8dd4d16ed7e052a090e40bbbbd6cc8af68d4d5cd94f0be9013f48","first_seen":"2025-04-09T09:30:49.365521Z","last_seen":"2026-07-17T09:07:02.830755Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ArbitrumOne.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ArbitrumOne.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 14315\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-37eb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBx8w7iuVuof4ElAh41KBpidVPsUGd89BaxzuZkbuYRbwujTFzVomMHQKyq1bMwGIq%2FGylnGVgC5Q3XWyJn%2BelSAY8SZizlLkxaZFGdxuSKjAYYH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14315,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"58618371c21e0738f2003ecf3bf4c594","sha1":"4e975e9696ed646094b55f41798a0fa0ecf04b47","sha256":"cf527fd111b05467e664403338fa62463d78e576cc6829b73c1bcd03edec6b4b","sha512":"2f60bb7be6c1da42a4892a6c60665c2896e21a323b47bace99d978a7c6e836419aeef034cee45b98d639e48398ff84fc342ee5749fd01d0692cbd279630c7ca7","ssdeep":"384:OOuvkpeEs68zor4FFulQN/4kd8VlV8jQghnPeqRR6fczJtWvP30EE:ZpfizoIEbk2f8PrRu3I","tlshash":"bf52c093e98e52fcc10460e8edac3dd9c54c692b6e407e72baf69d5e815c5d7c300229","first_seen":"2026-01-20T19:34:23.926212Z","last_seen":"2026-07-17T09:07:02.83708Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/2e57e7a1f1a5c5afd6305dea233dfdc82c5a29a4.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /2e57e7a1f1a5c5afd6305dea233dfdc82c5a29a4.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 853\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-355\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FCCiRTvUVl0s12ew5hKDSJEPfyj%2BCg%2Fz3E9%2BPt9hYrC0hpu1DH4YBgY6vhoITmVR5tyK7mzAK2HhlTo9hrCJxZPgDrfXybx5tUezpY14FsG14Ve\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e7b1d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 49, 8-bit/color RGBA, non-interlaced","md5":"8d5e5ed5766d75b2364136d88903e8b4","sha1":"2e57e7a1f1a5c5afd6305dea233dfdc82c5a29a4","sha256":"b1fb19e3111f401164c9a7ff6471a3c6080a03c4357339005f18b0306a337672","sha512":"e4855308e395f3e1c5badc0bd04e2734d1862a15c19d55c261fbe4fb7fa0394b17ab526f1919e47611b0bd0b382e760d02fe433b22a9f0bb941fbcca4f7c4db8","ssdeep":"","tlshash":"080196407acdcc269f0e5b110fe05370e95c5ae416a0f50db411168aa609f71541e766","first_seen":"2026-02-12T21:12:12.213854Z","last_seen":"2026-02-14T02:51:48.104151Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Completed-df92fc93.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Completed-df92fc93.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-1c7b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtArID5VmWtkDzEdEgD9cSWZwwRe%2FknSu5Ea4iAIEMqYqU5mWWekb8BVAg2xkXmkLQmJ%2BaJF8Yb%2BfFmJyeQMpulF%2FgjsixdTL7MF%2Fhgfi6yIilIf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2aeb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116659,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7afcdfecffed304c7e1b66642ccc8133","sha1":"1b88e6cf8d43e1a298488693e4c04a74c03faf42","sha256":"904484e61f62a04ee9358ad95a0da7b6e47c047923c2b81fba745dd241c608ea","sha512":"e968f81c3c8a5f40af685f818c7d13715f28552a454df1b7c5f7f76b917afeebdaf1c71f260995b1fae6493e9cb55df5edc320c2ebd95b378df1e0e96e9079ef","ssdeep":"384:rplCmpmATQ3+6LtnGyii/5bwC+wiM+aWAjmFDmTzApltCmBWcBv9gxfFmfkTTeak:ri+08DU/uOIhASUwn","tlshash":"f3b3231632dd241c227fec39fcd2ebd44b2a6372e2001a29b57376784e971d6fa36548","first_seen":"2026-02-12T21:12:12.207811Z","last_seen":"2026-02-14T02:51:48.105111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/fb2caae2bda28efd1c895f76eba1a1797226e6e3.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /fb2caae2bda28efd1c895f76eba1a1797226e6e3.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 249\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEK1qOqcaAhCQnaH6t4%2BTUvmSfe2XQCG3RMH6uMBAvhWaZAkISNvigF48xJ%2Fd2W5hzlPTI3wO66G1XyHCevBfqToR%2BElbNQ3X6B%2BvZOM7Hvd10Go\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 4-bit colormap, non-interlaced","md5":"58014d70f455601c54a705a7b625bc2c","sha1":"fb2caae2bda28efd1c895f76eba1a1797226e6e3","sha256":"086751d8654b4b6224a3335d9f950f58aa4b72ef145a86819c4c5044c7dc7fc3","sha512":"933e030824c39e27b8cac6163571e27900b908e16af9d848798862e273300565957397d5fd8a79185e42c1b1ba1072225a0dbb5ac2cc59ea588d5b8828027059","ssdeep":"","tlshash":"96d095c54d440960d234fb2b83a509054453155c3f534ac4d4354c369dd941962d8563","first_seen":"2026-02-12T21:12:12.278511Z","last_seen":"2026-02-14T02:51:48.106042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/49c75a129642378aa4e772392480717830d12362.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /49c75a129642378aa4e772392480717830d12362.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 889\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-379\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4O0QpxLqIVGlRVUZeuLLGqoXNI%2FOGMKp6akKQzJZ3liKqmDA0k3WtUGi7SO2viOZLDXufS7jV%2FqxMSw5fqctuCiUQ0CEnUUhC%2FCw24NLzvQ17b%2F6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":889,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 43, 8-bit colormap, non-interlaced","md5":"7d34c8bea3b1235d208d7eb6ec819e79","sha1":"49c75a129642378aa4e772392480717830d12362","sha256":"0d6008019c0c6aff5102b06c8cf892c8c36a2d1807aa03c67b3d916e5778fb1d","sha512":"a18798845523a4d117f0fc99279060ca577e1e38dcff2c4eb697fb23ee284d51aa2d1e3859a9d1ef1eb12d07d38779a8b57547d0b0a0ad1d3af50dbe2bac1cd8","ssdeep":"","tlshash":"2e11884d6199f511a8b615b01e217d480c371e1d4c75c2e24706f726d4f370f44ad64f","first_seen":"2026-02-12T21:12:12.179589Z","last_seen":"2026-02-14T02:51:48.107535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/48d12890d0d4159d4afcde0ecc13dd10610185ad.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /48d12890d0d4159d4afcde0ecc13dd10610185ad.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1768\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-6e8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDLbGWpCa%2FNtficaMu7mgmSkiW5wD0F29dBNspvKI9pMQJQ7nq8o0DlLUNGskj4ikLb7HbYwzTNQ%2F%2F%2FFns4WSQHzTlmeBl6m9Xk6qf4NZKYcqxs2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e7b191525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 84 x 84, 8-bit/color RGBA, non-interlaced","md5":"2ebcde52b94dccc2f7e1d5c3bce04ea1","sha1":"48d12890d0d4159d4afcde0ecc13dd10610185ad","sha256":"79b1754d6a84862a9bfa74bb5d3d2d537cc516ab0cb0871153ded8cf47c6bd8f","sha512":"83f757db9d44cca56eac40a73a5c1035f44fd93470c2472e9f4e32effb4a5171e442f149e4a7f4bd20e099b9d09a23ba73206dbe329ab5acf1c5658ab98a191e","ssdeep":"","tlshash":"b5314aa1513be21d4726c1b5c681c82bfe5a3a7ccec36c4e11aa8b807865373c5d8f72","first_seen":"2026-02-12T21:12:12.23701Z","last_seen":"2026-02-14T02:51:48.108676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ze-award%202-b1a8a74c.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ze-award%202-b1a8a74c.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-32e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3cObixWpqD0405wrThYSN8wb2TmDEhpmHBA0T3RETOYebMV156601Z4pQnsAQ9Do%2F%2BjGVsBgrNuwVcg3yP5d9euMbxv%2FzU%2F8ADc6ZVbq8zLaAWau\"}]}\r\ncf-ray: 9cd9435e8b1f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6038110465baec84282d1c42741aa3be","sha1":"e79981c0c6763a7ac4de89a4ea83b7fe8c09b5d9","sha256":"b1a8a74c07bd8440a5c890fbc45d0ca07fa980079656fd2c0601a8112ed522b3","sha512":"a0500519a1245419f7c3830ad1c001897001e30a7042070df6cf5ec84621af5f920ec64d362c6431b9c5421038ebe925c4519a6985a76d032453bbd31aa221e3","ssdeep":"","tlshash":"4f01cee5d779c158349a3594e6975920220d90eb9cc0209cb99cbb407ec3cabd602704","first_seen":"2024-10-14T21:04:01.957214Z","last_seen":"2026-07-17T09:07:02.803954Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/favicon.ico","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:21.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:21 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-423e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPiIfyioS9g%2ByeK8id%2BvOdXLAo16WGGSVnxQqMnuhbnIZwzVsySlufenJYEe%2FNCOeyyyWCoDkywYVWJCLuT%2Fsg45ZKcdcW8yzoXwuFYL7hVjVGOo\"}]}\r\ncf-ray: 9cd943620b931525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"9a3668077948666d503cba8eafc3a11f","sha1":"f8ffaf69ed87df81fc71a16ac0463d1078ede35e","sha256":"0f7a6e512702da032df56cae14a6b60fbe2d9465f4aa3c748022ea5135cb965d","sha512":"7eda3fdad30ae20739d1de6329c942dcbf66c60019b6c8e793275efa8577e294da17f1819b2a82795f78438bc2fac1d5e9f32eb6947812f771a83e9f2128b4c1","ssdeep":"96:SZg2w8ZtFz6aRwlbFJlTzT1sw+9GlKIP:qgn89mfr31LL","tlshash":"25721ec1eb187842d1a545f32066ec3355f65eb2727c7e3507d84ca73236107b68e8ca","first_seen":"2024-07-19T21:37:03Z","last_seen":"2026-07-18T05:01:55.945977Z","times_seen":22,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/RabbyWallet-c5ceabee.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /RabbyWallet-c5ceabee.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-1183\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuwR964OCrfsOm39ubsq6bR2ip1KCjmP8rR9OBhjQSOQgKfHHtVQ9j7Qq3T5DNWtrffgyW0bikJLBmWuWxmzg9HJeTC7YcCrb%2BsExBSg782FbAdN\"}]}\r\ncf-ray: 9cd9435e4afb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4483,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9132663a8482c108afcfc5eef1322cb","sha1":"ab06c849f5a9a809c10b82abe2f84059b25c63fe","sha256":"c5ceabeeacd10839278335fd1808d2c5fc60caa0bb7b1a2a6feb2a455f1e7d1d","sha512":"0a040b23ca78adbb6743d08c535639662d46e0a837a8a9fee807920e0e8fef0dfa876ced8972138a84c344f6849291c7bc6261120cd88147207d9a3393281148","ssdeep":"96:cpa2432rqMDwAwvUjE09bO7n2Z5mUQ7ked:cpXIUoD7nsmtv","tlshash":"3191d5a4f2d8ec8ac119b3bcdb095079269b52f5f702c149459caf2fa53de8ec90e1c0","first_seen":"2024-10-14T21:04:01.915927Z","last_seen":"2026-07-17T09:07:02.82038Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Symble_Round-9db1d785.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Symble_Round-9db1d785.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 11177\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-2ba9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXFz4mYnxqV5aoKAoh2YpJaw6r9R4lF8J9H%2BO7Yp0Ca5ZQBXV6Ar6tdozwZGNwqXFHzPn6oBynOF1%2Fjr9vWNNxbwoA5uEAi%2F0q0dwPzW7%2FZvKMz4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4b001525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11177,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"2f3e3ce3f982e32f21361642335a00b7","sha1":"efd3d4e875980ab8c4b507762c43b76c597909f5","sha256":"9db1d78597c8196b2791a185988d371951ddd6ecf15a959a642964bd7f9dff48","sha512":"b8b7b96c3872b2858c60496c7301b72888c92ada9d84ee7ce33ef1ba6a13e1ca6e169e4494c0882e5d2285c19bf01fc9a3b841c04e637e45eff7b6f6768923bf","ssdeep":"192:eIIHUCD4wa3S1Vr+DO6I6ceHyGn1Uv5umqXiDZ7PVHrgjqdMoDEn+wvpt:w0wD1RSON6/UwmqXiDZTVLwAMh++pt","tlshash":"f832c008a470140f112f97dbf4668038dbdfb60843a5fa5cd6db977ec814b71572a8b6","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.844922Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Coinbase-82f8510a.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Coinbase-82f8510a.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 7454\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-1d1e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWvIDxld86ZOMdnpV34lGGEQ4H1PkfBo1%2BzC6pZG6TzigGlIcH4ze06omqdS5RAg6DyYoHpBs63IHtEyAVrdWymWRiUGuBuyNM2i79HHKprHEzl5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e4afe1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"0b81f97a375033178e35172c91486832","sha1":"2c2fed49582bc7fdff13df0b8c23de80859e0b0b","sha256":"82f8510a165c605ab2c1485fc1658c3b9fbb76f9c5558a9b9c5b5c733d851393","sha512":"df71fb38d40a504d2740426e25f1cd6766f7913cd55aa5159cfd810bd47875c03953dee28681ebdd2fb2d3ad0c96cc4c7c47029126b8d22e4d34777f344e8d84","ssdeep":"192:1fiZpcYqpb36j0cIjtN522iefWJ4C78w+z5:FIg6j0hN5RIJ4Dwg","tlshash":"b7f1a0560a65bc24536bf4554c640a721b5c6ff9028320cdb918f6356257f1f8e506ff","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.833208Z","times_seen":18,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Ethereum.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Ethereum.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 8349\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-209d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMJMHAtBSEypTAI2eRBU4kP1Eh6RqYx%2F11TUi8v2Xuf0UvMdDGp4TQRFxTa%2FTDhDoFvp2LHW4r8ly8WlPvjVbzYLNss5LiEgx%2FlIPUbx%2B6L7yaqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 149 x 149, 8-bit/color RGBA, non-interlaced","md5":"1f8f7cefe53e96044eeb4ffd94fba270","sha1":"2a253aac176bf5f40a88b1f32dbb900ca7640e0c","sha256":"5ccf2d223f078c470099e13597dbe1ab84f2daf45c5e94edff67979595135eeb","sha512":"9a7b4022a424df77d8e6af2d0b643eac9939bc51f0b614cb4c3ac9b979af0c4afcaa45e4a4a3b2a879734e7b0822e0abf70f2b493b9599d431ad90aa029da1b0","ssdeep":"192:kSYs0hycZ55oCLiu1tulKkPJSN2aEmjdDuDw5v6kcjdvMv:jYBnLdtcGN2aEq55XwdvMv","tlshash":"a802c1ed0a9bd97f4584e48999c0507579a083d87814adfd80f4ac0c53ef6acc63ae97","first_seen":"2024-07-19T21:37:03Z","last_seen":"2026-07-17T09:07:02.82185Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/5e3c9be0e809d6fce3a86c2f47e6cf3c0f0cde66.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /5e3c9be0e809d6fce3a86c2f47e6cf3c0f0cde66.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 405\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-195\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YUdoktnjETISYKLFu5lkC9DV7ebtrlTKXeg3m4UPpgCYNqGLPVwFQ8%2FIBApx47jXZt3S2RqdncedMtIGydV6d55ATsajqAfKXFvhVJ%2BptKBGi0qu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e6b151525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"08be3a56c4b5ebf207234d8b599d8e3e","sha1":"5e3c9be0e809d6fce3a86c2f47e6cf3c0f0cde66","sha256":"cb2b48175a86be47366b567dfbc118626bb12454039391ff8e4133d78393001c","sha512":"4cd39a5cfd1d488a5779ad272229db5573118e1120ccea9940b0b2f3de478e431683c79a03e7a1cbf6a4bee4529d469a073cda05fc045d46f34c18d264b7b0a6","ssdeep":"","tlshash":"17e0ab821bbaa558da4f8d6100cbf4c8e8a5ba3542c1281c750ce8605922855685ab07","first_seen":"2026-02-12T21:12:12.27399Z","last_seen":"2026-02-14T02:51:48.115149Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/arcoDesign-apps%201-56db2384.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /arcoDesign-apps%201-56db2384.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-321\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjDq25pKkQWokguT3Z5pnoWtIkQcuni0jbfnL9xaawDC8f6URd3Gg6coc6OVQWCmg4UUa0z6sXUOWHjiuRvL%2BRpATvYHSJMGn3Elgo%2BnauNlQMBx\"}]}\r\ncf-ray: 9cd9435e8b211525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8100693ee6a59f8f594f0375c31a548e","sha1":"544c668dcbacaf2517738f45456da06efea74740","sha256":"56db238407e1f6dabfc4fe064e2c994bf5e3ed6e839251a5c5e3fc1053bd773b","sha512":"d2e6e9a377e5f8e676fa8b809749008392268ffc8af340f6c86a1c89d197defe013dfef24aac28339766a2289a3b543e9b43e2315cde111b3d5cccd7e6521163","ssdeep":"","tlshash":"6701c01873ca8c3ef4510a15e2a875b92071057b8a0c5504f8f72135fa0208efd3faae","first_seen":"2025-04-09T09:30:49.380611Z","last_seen":"2026-07-17T09:07:02.829834Z","times_seen":11,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/antFill-twitter-square%201-b082ca59.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /antFill-twitter-square%201-b082ca59.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-343\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s08iGdaaafFcdFBk3y145IAnq8dvB3s0GT7F774Ett%2FwpPOUREGDnEW1ZuZMS9i6h%2BS9LQZIu3ejBgv4MtNuNgYhkJBXiB1skEgcvLT%2Bfw%2FM%2FqBX\"}]}\r\ncf-ray: 9cd9435e8b231525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":835,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca9040c31b40f0eef9e245699d958a17","sha1":"16fd4f4fccc4701d648ce0ea5694f48bada280ec","sha256":"b082ca592a4f354205469aafc5fe9f3a92bae958b521300248bb9f3264445787","sha512":"1626159de14360cf78a1577bdd53cc389e0dfdb026d8b49ca8986a36fdac124dac73aed1c951569df1785af8ccd97cef9d86c9b1a9a77e6f2258b51f934a1103","ssdeep":"","tlshash":"7b01f15cdfcf413cc81283a6c63a243d298e91ea81e18874f3f84db0f9730c9c562a88","first_seen":"2024-10-14T21:04:01.928596Z","last_seen":"2026-07-17T09:07:02.851184Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/ctk-dark-ec857daa.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /ctk-dark-ec857daa.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 11364\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-2c64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AqqiBCe4j6ZE6U70ryIz8h29J4Y2R1cDGP42GIoIw62A%2Ba92g9SCmy9j3wGK6J%2BE0kTK5c34WDn187fmEdiKcoUk6UB8jNTN6PCF7Qm0a0%2BjGvn6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e9b2f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 617 x 161, 8-bit/color RGBA, non-interlaced","md5":"2f871c4220280a64b2a0f5d14b4d63f3","sha1":"71e7d2079caead477fb4d870d95cf31433a6c7e6","sha256":"ec857daa97342375b43b1fe8339a29ca19196d21461be419bce2b5f1aca3592f","sha512":"34b72a339389f318228b517fdcee37039a1a2c3519e954c7f188ca367f325f247788305b184b843eb3fc3ba65fbd3bd773c744846685698e31547ae04c5ff316","ssdeep":"192:Y5bm5KdFb6Qu7m9Wg30Hn2B/t8feMK7o4+WJ+788VKjnfjwAZfupsXxUmZKF:Y565yEZyWgQsV8feM7J88efjZWpsayw","tlshash":"c532af0841ee497f3c9b0c5bd68cb0d825f41de3560d8fb5343aa37a1a36218bd3b996","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.827275Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/653489212bdb90aabcf4f54e7f755200dc4e5f3c.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /653489212bdb90aabcf4f54e7f755200dc4e5f3c.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-af\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WcFKpQrp%2FPuNqY6j5H5wZFc90qhuWHHvIYJx0I7Dlj2%2Bh78mIIdr2%2Bu1uahOcOAdo2MP%2FNb9IMo0q%2FuC2ozQyfSWAAIW99ld3D4gBX%2FqFwRRcjOz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3aef1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 28, 8-bit/color RGBA, non-interlaced","md5":"e5bc61f880cdb4262629cd56e95bba5e","sha1":"653489212bdb90aabcf4f54e7f755200dc4e5f3c","sha256":"bed56905e6bed87f21ae10f40a93fd70f62f35b4cc309c9809664f8fd8e9e881","sha512":"9343726dfa3b230d21c2dc31e569d176c514d3ea0f800155bf8d8c5149d80a536d9527beaee5eed0d6e0c6f6a47bde72c844899791fc6a48eb2a3da7f6e3ba4b","ssdeep":"","tlshash":"9ac0c0c1d7406c3d428ef07d946b1480273f2c3d20023004fd03c45c0125c40db4d347","first_seen":"2026-02-12T21:12:12.276903Z","last_seen":"2026-02-14T02:51:48.121574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Metamask-f899f9fb.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Metamask-f899f9fb.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 10052\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-2744\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KL%2B7HNHyYQLxzv9CkexdQKLU%2FpgKz7e0NpJveOSA3kCB%2BBMEqFrtdDLC7gNUUBTWDppK%2B9fZfRhDSX9Aoq880H6Gt%2FfQyNwfXkC6QcOoC38eZ3cQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e3af81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10052,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"f96f4fa1dbbe541752d43d1afea00d30","sha1":"6a35ed8f1720f9635d902dfda54c41c748302fa8","sha256":"f899f9fb4bef506350b929ee0bbf71ba6a50b6f52612cc659c092fa68fb238d9","sha512":"854f4cbef5d2a7dbf01cabd3412e893b6a935d50d984a9eb380cb8f2418ae1d1d54031eb1b20c605b5335d0099b3d94b34091e1766b37de62ce77123223e128f","ssdeep":"192:KwMQDSAs7khwaBzUGtcmdj6szcpA44tOR7UZID3Wl7PWUSztgW:kQnsghwaWG36FYEB6IKeUI","tlshash":"b922c0e3e6105936857d1221446d33a62b499d64c5c3f407af409f722a9f2331b97ac6","first_seen":"2024-07-19T21:37:01Z","last_seen":"2026-07-17T09:07:02.832294Z","times_seen":18,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/blind-banner-badb2924.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /blind-banner-badb2924.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 151922\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-25172\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hKI8y%2FjewNDNLraE7TwXfttVCf7aGYsDaw%2FCUj8aqpIGxQk6KtVY41c05mSUtIMRIQCI%2BjeH3XtyhDDpLv7MY9f1I33D34dHka4%2B32DaONieJcNw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e6b121525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151922,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1208 x 164, 8-bit/color RGBA, non-interlaced","md5":"3568fd47d85982020140409e98f111e7","sha1":"5acbb7755b6f1c55b268eb677cfa062a8f01c154","sha256":"badb2924db1a6b803ca820b34d453ad1e0ba6422efd29a9fe7661d098c50c181","sha512":"44b282fce344ba82be6453e1685ad0e7591f3f1a7d2831071482ca06562a2ea8c836af771b7b1dd1b4cfa2b468ba47c3e3021c413808ac8a7c69cb708db71f16","ssdeep":"3072:FfCt34bHlraM5IP5pnbcq59XjU2/C74FhBBXqUTbpM6k4NsFV++Z686cHEv6j:FfF5IPLZ9TMgBBphk4A++Zfc8","tlshash":"86e312f590187a4ed8cddea18a0f49a917dd914f77185e24c3713a9be44ba2db0f022a","first_seen":"2026-02-12T21:12:12.27953Z","last_seen":"2026-02-14T02:51:48.123385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/discord-e639140c.svg","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /discord-e639140c.svg HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6979cd24-689\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJzwdGEU3%2F5DCIAg0tSoMEPniwZFt5bfyQdGzJRXvs9hiLjUtAQQAjgofCHqHiF9qZ0%2F%2F9jzbQ74KtCjVa2RrnTD%2Bn2QtzLkbOuGchNZPEiHfMku\"}]}\r\ncf-ray: 9cd9435e8b241525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d746c7a88d2655ad0629af4434306e6","sha1":"067c802b6669403e9f6d262a24badd2e814f6d75","sha256":"e639140c49a6ec29776b12db0b50d38a3c56c0c005c0ffe82cdc28724907d550","sha512":"6ce809c4e962c22eda31fc107d0d754ff38ee56728fa26df5dc04fc2ff9ed7f7c4ea80c94a06c8ef8e815c75aadbdea80dfd2bb73f752638af539b839c11e73e","ssdeep":"","tlshash":"e331f0fce61d445c9447474eda2a4524a70ee4fb31610fa5c94ceeb8d04b8a4da07e69","first_seen":"2024-07-20T14:36:11Z","last_seen":"2026-07-17T09:07:02.81673Z","times_seen":14,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/bg.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /bg.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 182957\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-2caad\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YP2Ife8ALbSsXJLZGKrtaKWmjGnwhSlOWMnz6i7witPejs0q5F61iSbrOU4V68NPvPhDZoELxU8Vl34bbStEdLYDIlUl1rklbn%2FWp9Kfx4mBH9sS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e9b311525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"20039079c1779ee116127922a037e84a","sha1":"b4375a914ac420e8e563629981565f06feaa12a5","sha256":"e71d5bbb1706f3241f2e969ecf63162752bb2d4e6c625b912a945fb1a82b5362","sha512":"ee7b4d619759cca333c5d031e3cec5ffa9515496b875065cf735c1f3599e92005eebce06ccf71dd16f44bd0e73d30e7be2791194e42ada3e3843464fa2ba8bdf","ssdeep":"3072:RQ0wU9YUESLl3G8ymJWCJzQMD1nyg5FAosqwU7CQZXgDFEh:RQupES88KitR95iqP7R9UFEh","tlshash":"d304128fc17d9f2d295848e12c2b5009a5846b4cc4ab752f7fc0b8daf791a4d7ec70a9","first_seen":"2024-08-29T18:03:35.947779Z","last_seen":"2026-07-17T09:07:02.843043Z","times_seen":16,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/adsct.html","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /adsct.html HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WaPMSK3M8W6x%2FZSdUEaBJ92pk2ZSnm%2FrVK1B%2Bk%2FV3i%2F6kWuSM%2FkgQCOBrkLeoTVoxdUfz%2Flu2MjwI%2BWl2EBSt7B%2F11D3PPrw1b842HtzhHORVqeS\"}]}\r\ncf-ray: 9cd9435e9b331525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/adsct-1.html","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /adsct-1.html HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gUq3IHgg0a3%2FEU2y%2Fw8wyJTN9a8WK8G31HzTzotsrx%2B58va8kJGaDauFqXlBa7S6zZxcYCTKPrd%2Bz448eUmJYMw39tHUyM%2FGWNTL8rU7FTH1oTbc\"}]}\r\ncf-ray: 9cd9435e9b341525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T02:51:20.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74wxjtVS71JILkn%2FEpwO49%2FDCHGShOSZq5IScl0j4YaSd6qnJRFzJleXyvwxjihf5UXH4kJ%2BsMhdZZWFXLc8%2FCxlDr71MvCYQqLGkQSWcoE4hXUJ\"}]}\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd9435cdc5f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79202,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5913)","md5":"910a262be8e31c1b2b431b09221dab69","sha1":"8f04d74ea84c2c3dcaf338eaded020acae1d2c7a","sha256":"240da8f6e96237d144d8ea09aaeb129866646cec5e1789c7f90f28349e0003f1","sha512":"e9d47c7877a6c097cce4db7323dc2d246b8c681e924e852b5d2efd1cdaac176513ae78473c2cffd80eca31355a0e2b9759d668a73d6e7a060686f9fca7db3e92","ssdeep":"768:uT88qXz4w6C7XdX87W/iyuikXY3kX90x4uF:uT8vXzt7XdX87W/iyuikXY3kX90x4uF","tlshash":"8f7350547ae0106765a3c1c0e9a17e2a379afb13e14a4914baef16c04fc3d74fc97a9c","first_seen":"2026-02-12T21:12:12.24869Z","last_seen":"2026-02-14T02:51:48.12674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":15,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/Beosin-light-b72faff6.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /Beosin-light-b72faff6.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 54116\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-d364\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bMegFLxektmjO0lQymqMIC5Di2EYa3BxFlJZdMp5hxd7rY7p7iV6asYZqghG63gr1iT5UsEZyCrP8xzg2jgL1StvsNhVMn5RoTpL9HBV1Wpmxoa3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e9b321525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1178 x 361, 8-bit/color RGBA, non-interlaced","md5":"0557b4537f314f001d45f19fcb25163b","sha1":"3f0b67200f7d5d8f16c83502f7f75ec7b5700738","sha256":"b72faff61d54030b3ad9dd8cbe22aa00a1898401c2a579c4ce482b7fdb68f439","sha512":"270f38f094476d41d90fb7a2bd82ddc5ad63b1e0cb82fe7f5a9178bce5db525cc4395de3ae4de2cda347c79b59d812b747ec8ecf2ce835e50ddf9cc41b3834cb","ssdeep":"1536:MmsVZgNxku7KVqENSZ5RHC/ss6v/tawj6Njuvna:MPVZg7qVpaik/vl365uva","tlshash":"7033f167251cdc2ec09d92f313b9689b6685eef0e7d7cbd4c01ab4ee8e854219d182c4","first_seen":"2024-07-29T04:27:44Z","last_seen":"2026-07-17T09:07:02.846738Z","times_seen":17,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/InterVariable.woff2","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:21.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /InterVariable.woff2 HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 352240\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-55ff0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUxmB0zp4%2FLBpfV8Oq1qHB5cvNzI8qm7b7bkJp7Yl9I%2B7H9nSuzLZGTVCZEPQaziGbendQO5t%2FtB3cuXcUA15Fg17DA6WNXtVGS01mcwrQjF3AhF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd943623b9e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-08-11T00:20:10.229402Z","times_seen":15640,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/secureproxy?e=jscdn/getFile","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:21.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://get-owltofinance.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://get-owltofinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"eo2upuit3j1bi7kc0oxl\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6CvCEgwrHUiK6jbsXoGFWpFSKPGcZVkIDskUwcZ6NW5myNi6i3MbauXv2bjOVyyCG21CChJh2Z7cVD8WplvG2jR5qMFaWiv6X8%2BjbzRhj4%2BUrA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cd94362fbdd1525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3423168,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"74aac4a639981087f5584a8eacef9e4d","sha1":"dd49af5b0d7212fc0479574f4c31c189532765c7","sha256":"ca5993103b3c4f94d11b730bd93ad28e8aa18ce78b7b1c864305dd0afbc38815","sha512":"8cf9b2f9d96a86b2ff5cecada39819a92021229373332d46e9f6b6f2714cf0ce88b937b12cf1d0a0e73352037254e865a9e1f4dae126f160d8a3c83983248aa7","ssdeep":"24576:nb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0RJp:bGkwdNZngkO5Jp","tlshash":"692523e26f579828cf5c4ee9613b6d0e2c040c512489faf6eaa5e88731da77041e7d39","first_seen":"2026-02-14T02:51:48.129088Z","last_seen":"2026-02-14T02:56:08.971008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":344,"receive":457,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/iconfont-1.css","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /iconfont-1.css HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: W/\"6979cd24-690\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 44\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejCv9qt2XniJyK5pDAB8bB%2FHWpQxkXC6fto99MQUfFp6gZefuHkHmuEjb7H9m2WOUYViUCzxBzbsM4%2Bqs8Vz5CgT%2BouOFBTobiBe0IY2921%2Bohf7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd9435e2ae71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1680,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c35ce09c422464bd0406e9012f7dc77f","sha1":"41dc589fb19f43603eb3c734d4cf103736418106","sha256":"fabdaf36460432c7a952bb1a7578bfb23a43f32c2e99fdcc5c8bd21a225d1184","sha512":"0fc12b8c59ef8a5870ed89814f129eeafbc2af5ac9c39303c9c3b57a108ac2283e3db194e79021a7336654f154daf8865c976532035fbd43f7b386e5c7d182ed","ssdeep":"","tlshash":"873138d09cbc2c705318e4d13246a721ef0862a98e8b0c5bf2677c9cabe331141d6bdc","first_seen":"2026-02-12T21:12:12.17763Z","last_seen":"2026-02-14T02:51:48.129964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/4868b8421fea7862d87a1f0400f28e9d70d5d236.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /4868b8421fea7862d87a1f0400f28e9d70d5d236.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 282\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-11a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mKWrDvH2JS%2BMMyyqNPgXZkp3P6agEgG0rT9vacXf%2FPGT8cp2CP15Xszj3zkzb8f%2BOrWtAL46QuvgcHNqkylWY9uIlY6uqX81JI2FypZ3uehBu5Mf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b0a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 4-bit colormap, non-interlaced","md5":"42657253408f084f8fa10c45856db607","sha1":"4868b8421fea7862d87a1f0400f28e9d70d5d236","sha256":"8d9118a0f43c8c2f5284b9573ac214a643ca46264473bc2b4c77f3ea8869b2d8","sha512":"f48dc41f042486d6ab393c0981bd4e7d13bd4502e7a94b3058e64c2c3bb4a6569d7d0fdfc53e01ccbd138b57a18cd657518a880384074630551f9f599388790c","ssdeep":"","tlshash":"d4d02bed57b146fccbe60b1963271024e710910949168e0d7207ccff39ba55c41da78f","first_seen":"2026-02-12T21:12:12.267919Z","last_seen":"2026-02-14T02:51:48.130774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"get-owltofinance.com/usd1.png","fqdn":"get-owltofinance.com","domain":"get-owltofinance.com","tld":"com"},"ip":{"addr":"104.21.85.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://get-owltofinance.com/","date":"2026-02-14T02:51:20.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"get-owltofinance.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 03:53:34 GMT","end":"Tue, 28 Apr 2026 04:52:15 GMT"},"fingerprint":{"sha1":"2F:59:09:66:E6:EC:EF:BE:02:71:37:B6:9F:DF:30:7A:D2:DC:8C:E9","sha256":"93:BC:84:74:D6:8A:54:B4:1D:4C:17:36:23:BB:A6:2C:FE:E5:5E:80:14:C6:72:37:3D:01:4A:D0:1A:03:17:BB"}}},"request":{"raw":"GET /usd1.png HTTP/1.1\r\nHost: get-owltofinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://get-owltofinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 02:51:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1524\r\ncast-mode: default\r\nlast-modified: Wed, 28 Jan 2026 08:47:32 GMT\r\netag: \"6979cd24-5f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 44\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRUoc95DnaZV1d6hZekuQDmL6npaCBsJYowGqYcl5DJ%2BQTJ5I7RoB58MxawoJGT471%2FCc%2B8V522q4KVAKXr0zfpKWsAXtoH6k8krvJ0uOc7tit5S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd9435e5b101525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"dc88f8a66a867b3d4d681a78ac68b711","sha1":"0a39828c1c88048f8686b486934291649683de0b","sha256":"d5f04ae1ba37e8ec16ac06bc055cc3a1363cb4b727845c1bd94f6e52a0b2463f","sha512":"6744c6ffa653ed6c93b5711401251ef03a0806ebdd3f934593ec559e365f320661f87e0b657859baac22c2ef500ced95347fcb05c318f6224f5e73e5dfdf1970","ssdeep":"","tlshash":"c331074cc8d32ecd7bb836605b13013204f604f0436fb6686c0bc80a8e78c4a38e45e9","first_seen":"2026-01-20T19:34:24.00465Z","last_seen":"2026-07-17T09:07:02.815715Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"get-owltofinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}