{"report_id":"71ef5a36-5b2d-4f59-8a1a-364c948aec22","version":6,"status":"done","tags":[],"date":"2026-03-22T17:14:46Z","url":{"schema":"https","addr":"www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"104.21.47.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"title":"Overnight Payback","dom":{"size":34616,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17064)","md5":"bb1f600c469d3e1cfa7131e3c54f0660","sha1":"7ef6bd0d0ab7722c4ba43843788258eb9847c6ea","sha256":"77873b17ab91caf74ba7ae4bd75c3712a7826a80b62d2d14d744421c5b3a6c54","sha512":"b9fa4b1a28a96505332443c5830ae677d8fd658908fd3d89aa4de31bec7d947a59d464cd22309f3664eee4b155aff8cd72d0a19f5b2cc684f1c7516af675e2f4","ssdeep":"768:3w/Y40rGV4xksc64Jysq7v71zw0gw4bgOBHGOB3w2RH/z:54ebx/c64Jysq7v71zwbwi7BHVB3wk7","tlshash":"8df20a50700c62782d2b8b58ffc8b75c9128f541df36542af10e059ae5d3fe63ab3aa5","dom_hash":"domhash13d42cd5a82fa37a7802af2b2660b955","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"104.21.47.58","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T17:14:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.catatan.digital","ip":{"addr":"104.21.8.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-22T17:14:46.894453Z","last_seen":"2026-03-22T17:14:46.894453Z","alert_count":0,"request_count":4,"received_data":58725,"sent_data":1828,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ovnpay.vip","ip":{"addr":"172.67.144.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":770742,"sent_data":1346,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-15T22:19:58.945817Z","alert_count":0,"request_count":1,"received_data":22015,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-15T22:34:11.913686Z","alert_count":0,"request_count":1,"received_data":8268,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":2,"received_data":117869,"sent_data":1137,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.20/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c41e7d208e9696af7b9be940dab6834a","sha1":"d717e4533013ced16678c88dc030d18cf196f4bb","sha256":"da6599034a6026f05710f3e55d859d56a3adf7ef5f3f60362bb0b550644cb37a","sha512":"f16650579c9936ae7ed3fcff1c4ce085e8db4e894d528e09b9e6ce3bf285f09b2957d554de6e42ecf3cd28da259eb07f584009aca61df9a562f9be97c0e4c321","ssdeep":"192:bRzla0z9WTeeOdvcZH3ykAd3X52dtPqnk8:bRzla8kTeLdvcZHzAd3p2rM","tlshash":"b4f10f8ab1dbb1051393e5b8042f5046f16e499674af9aacf439c9c3bc7484ec13bfa4","size":7477,"data":"","first_seen":"2026-03-22T17:14:51.15033Z","last_seen":"2026-05-03T13:56:28.850923Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ovnpay.vip/assets/index-DZxUjkNT.js","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"172.67.144.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18368129fe525680ec3cf6f7ac0516cc","sha1":"58fc3e833deaab2e5edcd59fe30c3fba92beffda","sha256":"a63c64cc6b396f1b05d76c646d586f917b826b133f28c4036d1f63fd9985b223","sha512":"4d72e7167509f64059f3e9baec384a46498db6e63e9cf9760a5f1d509fa5f3b4e6790fa76fc467f2d64f674e9f5c53beb84fec58dfcfe869b59f6c1e7a04a027","ssdeep":"12288:HHpgqgl6boKublZTeFccQSfFFicoKYop05uko7k3WaKwj38xTVC6hiBo+ro10o2h:HJgNl0V0HTeFccQSfFFicoKYop05ukoA","tlshash":"93e46cd47096b6795fab0ad1507f0009f13d2a22e01d8860f07cec696ab9543b27bfed","size":666809,"data":"","first_seen":"2026-03-22T17:14:51.149249Z","last_seen":"2026-03-22T18:18:16.46814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.catatan.digital/overnight/icons/icon.svg","fqdn":"cdn.catatan.digital","domain":"catatan.digital","tld":"digital"},"ip":{"addr":"104.21.8.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catatan.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 08:38:28 GMT","end":"Tue, 09 Jun 2026 08:38:27 GMT"},"fingerprint":{"sha1":"73:2B:46:0E:4D:9C:0B:21:39:7A:6D:11:3F:C2:DF:6E:35:4F:6D:0A","sha256":"34:FE:6F:78:6F:E9:81:68:8E:63:AF:AE:CF:B4:C9:33:F8:CE:95:4F:1B:D5:69:DA:3C:3E:02:72:78:E5:C9:2C"}}},"request":{"raw":"GET /overnight/icons/icon.svg HTTP/1.1\r\nHost: cdn.catatan.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 17:14:25 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 24411\r\nlast-modified: Wed, 11 Mar 2026 09:21:24 GMT\r\npriority: u=6,i=?0\r\netag: \"69b13414-5f5b\"\r\nexpires: Tue, 21 Apr 2026 14:54:13 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 8411\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qY1RnGUilCkqso0WDdhM5cGVBS75zWfu4qzKkQHMg7AX3CUZ69wMnbt8Ld6Aad32eXjCBrWjFGEuiIEiKz0MEDh2xcJSlXWZEGchifkfo5NiHxA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e06d526c8eec8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24411,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6050434980ac2a161a8bd964c96c3431","sha1":"45806afb1b7a60ffd92755cf4a8f874f3a0c8ad7","sha256":"47dc26041889e48ee5c7d0601ae48144b53bf439952140dd2b553591cd1c734a","sha512":"74955ab892912b2362653f9ce3234b0607408372bfa9d1c32782e505995a750dad500c8def4fe5d4e7308af1f068c84d3617694a5a7915c913d5327d0b7fd193","ssdeep":"384:lJLKlUhhM5G5sz+btdlmofM7XTvYamKYTqjFtOq+S14JNGe:lJ2lCsGd/eXtGTqj5+u4Ge","tlshash":"50b2b5d673b5a2f8f005e7f88b5254313a063cf63a22c5e943b55d99ea1408c8da9cf7","first_seen":"2026-03-22T17:14:51.143999Z","last_seen":"2026-03-22T18:18:16.466566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"172.67.144.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T17:14:24.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovnpay.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 05:26:09 GMT","end":"Wed, 17 Jun 2026 05:26:08 GMT"},"fingerprint":{"sha1":"E6:7F:DF:64:05:09:72:B1:28:55:F8:58:FC:DC:B0:B2:2F:13:F4:AB","sha256":"0B:59:A5:FC:7C:33:83:3F:AE:AE:A4:F2:C0:6A:19:0F:25:3F:6D:DB:7E:70:C0:6B:15:49:B2:A5:AB:1B:D4:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.ovnpay.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 17:14:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 20 Mar 2026 22:20:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pc63WIxJo84m3J%2Bv1lBgXaTCHZybbgQ%2FPIPRBft5P%2Fq5cqALgCEMFxGSg6kFyeFq88fmj8Ip%2Fe9BCK97GZU7rvUpPhADMfeYfKvBcNoK\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e06d51faf61d9c3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2709,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"79093ab8115a40b07a1e5055613889e8","sha1":"8cb520a74cc331b64429227a95434b68e725dc84","sha256":"5a0cce9934739a1e8368af84f030b6b8746951041c64ac5a273ed1f13ff423dd","sha512":"be6742b570b5e7e032d7d9a1b4832f0fdc97994ce9d481642ab93fd8dd0ebda750b2685670093828e05b0fdd37575fa2618a49fe912b3b5ce949eb6b4ac853fe","ssdeep":"","tlshash":"5551412b5a414d3e0371c2596b81b71e83be7d1dc468dde0a29d239f2cc2ee4c1b72a0","first_seen":"2026-03-22T17:14:51.144953Z","last_seen":"2026-03-22T18:18:16.461054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":48,"dns":25,"connect":8,"send":0,"wait":99,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ovnpay.vip/assets/index-DAVKUFzJ.css","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"172.67.144.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:24.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovnpay.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 05:26:09 GMT","end":"Wed, 17 Jun 2026 05:26:08 GMT"},"fingerprint":{"sha1":"E6:7F:DF:64:05:09:72:B1:28:55:F8:58:FC:DC:B0:B2:2F:13:F4:AB","sha256":"0B:59:A5:FC:7C:33:83:3F:AE:AE:A4:F2:C0:6A:19:0F:25:3F:6D:DB:7E:70:C0:6B:15:49:B2:A5:AB:1B:D4:62"}}},"request":{"raw":"GET /assets/index-DAVKUFzJ.css HTTP/1.1\r\nHost: www.ovnpay.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 17:14:25 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iuMQG8%2FLMXlQEVqzjNsx9GDORP9hK%2F%2FiubEiYWCdkXdM8fHeLJRFcszyHB83BhHlCSKjsMt60K%2Bo71jxBWQcMiJIi8QhB4Y7gpc%2B03sJ\"}]}\r\nlast-modified: Fri, 20 Mar 2026 22:20:33 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69bdc831-183fd\"\r\ncf-ray: 9e06d5214a533e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99325,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6e196501c0d24d071b0e703236bc372a","sha1":"a04ae9e5243aeb7fc7deaaf3a92bd176e3ab658c","sha256":"846bc014911d25637e47025a01ce87ca6932d8e4ce8571c0f77d4840889aaf4e","sha512":"1c4f71495bc1f0e91b82985fe50c1a8bc72c9baef139947252f3257300494840ff0ac0a01bee601c832f9a5a085a89ffad93af29ee5928d4cba3b441bfe1ef81","ssdeep":"1536:eIMLhB1tpE7P/e+bRX1dxYfU7QiMjrhuqFsXJ/SxfKFY:bMLhB1t2P/ewYhiMjrYqk/SH","tlshash":"1ea3c7a0722de93fbd6364f5d38cb88ca5097085de2947e9fe06722213c7bf56c6a504","first_seen":"2026-03-22T17:14:51.145862Z","last_seen":"2026-03-22T18:18:16.474969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:24.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 22 Mar 2026 17:14:24 GMT\r\ndate: Sun, 22 Mar 2026 17:14:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21329,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f1522abfb2f0a52d3866bc11cc6e54fc","sha1":"15db7eed71085429578bf753908e054c16256db4","sha256":"ac0877eb80841eecb48e95b9c57ebd8c8ee05096e2e8daa0b65ed69a2a62d9c2","sha512":"476d1c9c7aa754c2b6823ee58f97af6059c778039e7897173892e98cadf97e54a58909558a58616094212ae75a6c2748a46aaa0a8d787d513e8bed643f2a2637","ssdeep":"384:jK84YnoBGpfd9c4xpxCW5VMtqYDuw4Ah0Oc3rqYIL:zbAc3vU","tlshash":"20a2e0814007a015ae57bcc737ce7d25ae0d12787500d5b9abfe4ac9dc86ca583b4fae","first_seen":"2025-12-31T20:43:14.648276Z","last_seen":"2026-05-20T20:30:55.869883Z","times_seen":272,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":106,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.catatan.digital/overnight/icons/googleLogo.png","fqdn":"cdn.catatan.digital","domain":"catatan.digital","tld":"digital"},"ip":{"addr":"104.21.8.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catatan.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 08:38:28 GMT","end":"Tue, 09 Jun 2026 08:38:27 GMT"},"fingerprint":{"sha1":"73:2B:46:0E:4D:9C:0B:21:39:7A:6D:11:3F:C2:DF:6E:35:4F:6D:0A","sha256":"34:FE:6F:78:6F:E9:81:68:8E:63:AF:AE:CF:B4:C9:33:F8:CE:95:4F:1B:D5:69:DA:3C:3E:02:72:78:E5:C9:2C"}}},"request":{"raw":"GET /overnight/icons/googleLogo.png HTTP/1.1\r\nHost: cdn.catatan.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 17:14:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 17206\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Mar 2026 09:21:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69b13414-4336\"\r\nexpires: Wed, 15 Apr 2026 19:06:57 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 511647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gFiHartN92eTu1Gejw%2BKg8597KO9J9CthbKPpij03qAfhNnAqzlo3ogrJ63dpsqkRdu3ZLG5K1jJ6cHRsHzy%2Bx%2F5HIr8aFlK%2FrQ765JwBYIVZ8Q%3D\"}]}\r\ncf-ray: 9e06d5256d651382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b413577cf5bb1bd48579715b6f9caab0","sha1":"76fd1054fd1293c042f4265b039de6082a8cbf83","sha256":"8ade32d663cd431e76e6afb2e46a0d875073ced153909936bfbe5b1054ebfdef","sha512":"fc361c7b390c833d99eaaf2d428551a9410632a7d1199cd0e6571b77af418d81b182cec0c1d5760da4cb002113ce308f5b76f7d31acc5ac5e0cb17492d17ab30","ssdeep":"384:f06QEkFKjGeGPxFPUn8f+WCRdix7rawHwQVrzW8PZ2QWeXdSOKbxB:s6WKRa88f+W1HawHw0rz1c5YAD","tlshash":"4472d00fa56992cced057c7de2a4e40dd6452a42e5df19fe3ec8ac87e2f9c1458bc504","first_seen":"2026-03-22T17:14:51.147415Z","last_seen":"2026-05-10T08:34:22.86105Z","times_seen":3,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":38,"dns":9,"connect":8,"send":0,"wait":21,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.catatan.digital/overnight/icons/facbeookLogo.png","fqdn":"cdn.catatan.digital","domain":"catatan.digital","tld":"digital"},"ip":{"addr":"104.21.8.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"catatan.digital","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 08:38:28 GMT","end":"Tue, 09 Jun 2026 08:38:27 GMT"},"fingerprint":{"sha1":"73:2B:46:0E:4D:9C:0B:21:39:7A:6D:11:3F:C2:DF:6E:35:4F:6D:0A","sha256":"34:FE:6F:78:6F:E9:81:68:8E:63:AF:AE:CF:B4:C9:33:F8:CE:95:4F:1B:D5:69:DA:3C:3E:02:72:78:E5:C9:2C"}}},"request":{"raw":"GET /overnight/icons/facbeookLogo.png HTTP/1.1\r\nHost: cdn.catatan.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 17:14:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 14908\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Mar 2026 09:21:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69b13413-3a3c\"\r\nexpires: Sun, 19 Apr 2026 04:14:38 GMT\r\ncache-control: public, max-age=2592000, no-transform\r\naccept-ranges: bytes\r\nage: 219586\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vtlWQelSj7odEdot9ndzck6ZqfQV4sBAdiE8D2%2FolTdn%2FTUOKZVBS%2Fba%2FToCPshBBOZvzcwS0BsvSetifDS8nwskh4eVbbeloS2qGX2BVPXp0Qk%3D\"}]}\r\ncf-ray: 9e06d5257d6f1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"83c247dbfc0ed1d37c42f2c9ae7397ff","sha1":"ade8e771b385b3e2de699d772ab430b14822bdd9","sha256":"7c5e22b4f86962835fbffe9cea2a4b9d7596c4a02ed8ef73ceb617081c56e94a","sha512":"32688e1d6f85e2a63d8e52e5d476096c32b23c9a93d1e0128ec31a3379b49cb7261487fa9dd13d0f9b0e805984a42c45bd7c2ba15431a9a57e9a9caf681460c9","ssdeep":"384:m9JHRY2jOFt0H+RNYIPf9FcRdQW/o1GMDQerhCZK3:+1etsrO9uR/o1GVkCZK3","tlshash":"2d62d141be2b994252418066dd641bd58310d3c94b8e72efc49b10e46ddeb67f2d0c8b","first_seen":"2025-09-07T09:38:09.657113Z","last_seen":"2026-07-09T16:45:03.148564Z","times_seen":17,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":45,"dns":7,"connect":11,"send":0,"wait":22,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ovnpay.vip/assets/index-DZxUjkNT.js","fqdn":"www.ovnpay.vip","domain":"ovnpay.vip","tld":"vip"},"ip":{"addr":"172.67.144.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:24.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ovnpay.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 05:26:09 GMT","end":"Wed, 17 Jun 2026 05:26:08 GMT"},"fingerprint":{"sha1":"E6:7F:DF:64:05:09:72:B1:28:55:F8:58:FC:DC:B0:B2:2F:13:F4:AB","sha256":"0B:59:A5:FC:7C:33:83:3F:AE:AE:A4:F2:C0:6A:19:0F:25:3F:6D:DB:7E:70:C0:6B:15:49:B2:A5:AB:1B:D4:62"}}},"request":{"raw":"GET /assets/index-DZxUjkNT.js HTTP/1.1\r\nHost: www.ovnpay.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 17:14:24 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MdUFA%2BTpt17EvmcsLg2Gpn7%2FUWZ1yfgyi0EG1rvW%2B%2BxrdLbRnJmoxPmucs506ElcahTD84MFMWJTNGFGkamu%2F9qNlclQqiB4ALSLf6h\"}]}\r\nlast-modified: Fri, 20 Mar 2026 22:20:33 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69bdc831-a2cb9\"\r\ncf-ray: 9e06d5214a523e6a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666809,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42199)","md5":"18368129fe525680ec3cf6f7ac0516cc","sha1":"58fc3e833deaab2e5edcd59fe30c3fba92beffda","sha256":"a63c64cc6b396f1b05d76c646d586f917b826b133f28c4036d1f63fd9985b223","sha512":"4d72e7167509f64059f3e9baec384a46498db6e63e9cf9760a5f1d509fa5f3b4e6790fa76fc467f2d64f674e9f5c53beb84fec58dfcfe869b59f6c1e7a04a027","ssdeep":"12288:HHpgqgl6boKublZTeFccQSfFFicoKYop05uko7k3WaKwj38xTVC6hiBo+ro10o2h:HJgNl0V0HTeFccQSfFFicoKYop05ukoA","tlshash":"93e46cd47096b6795fab0ad1507f0009f13d2a22e01d8860f07cec696ab9543b27bfed","first_seen":"2026-03-22T17:14:51.149249Z","last_seen":"2026-03-22T18:18:16.46814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.11.20/+esm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/dayjs@1.11.20/+esm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nOrigin: https://www.ovnpay.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.11.20\r\nx-jsd-version-type: version\r\netag: W/\"1d35-1xfkUzATztFmeMiNwDDRjPGW9Ls\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 181485\r\ndate: Sun, 22 Mar 2026 17:14:25 GMT\r\nx-served-by: cache-fra-etou8220085-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3372\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7477,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7134)","md5":"c41e7d208e9696af7b9be940dab6834a","sha1":"d717e4533013ced16678c88dc030d18cf196f4bb","sha256":"da6599034a6026f05710f3e55d859d56a3adf7ef5f3f60362bb0b550644cb37a","sha512":"f16650579c9936ae7ed3fcff1c4ce085e8db4e894d528e09b9e6ce3bf285f09b2957d554de6e42ecf3cd28da259eb07f584009aca61df9a562f9be97c0e4c321","ssdeep":"192:bRzla0z9WTeeOdvcZH3ykAd3X52dtPqnk8:bRzla8kTeLdvcZHzAd3p2rM","tlshash":"b4f10f8ab1dbb1051393e5b8042f5046f16e499674af9aacf439c9c3bc7484ec13bfa4","first_seen":"2026-03-22T17:14:51.15033Z","last_seen":"2026-05-03T13:56:28.850923Z","times_seen":4,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":2,"connect":13,"send":0,"wait":15,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.catatan.digital/overnight/icons/googleLogo.png","fqdn":"cdn.catatan.digital","domain":"catatan.digital","tld":"digital"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.454Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /overnight/icons/googleLogo.png HTTP/1.1\r\nHost: cdn.catatan.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.ovnpay.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T14:51:02.558956Z","times_seen":17504897,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v67/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/googlesans/v67/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.ovnpay.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 19:32:47 GMT\r\nexpires: Thu, 18 Mar 2027 19:32:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 17:14:52 GMT\r\ncontent-type: font/woff2\r\nage: 337298\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55236, version 1.0","md5":"c18fc0a75463dec3dcb57969fa6c9024","sha1":"200047bb27ba0c2002768ce4fca4a5fc3274215b","sha256":"d071523f3ff7e73cb803fc2f604365b6694fef67bae945b1c7cf541c2f6cf263","sha512":"6bd18f41722f0d687484d68f6d8c724d6d315d92654782f21e649b39bb6a88b3a69fcfbbedc401e025902580b28da724e0eb0a617d7e8a12b7ae12b85513d433","ssdeep":"768:KQMMPYoc5yvQUSnLUDwYxUUnaoeHxszW82F0wBWmEA5nCX7IPKJrkVZli0fREaa:DPYp5aQVLUcgao46Wh7BV67pIVZlif5","tlshash":"9043021806cbca8e58a80c0e16f54ece555c3f6bfa2dae58408f9384b4cd893dd6f360","first_seen":"2025-12-31T20:43:14.58798Z","last_seen":"2026-05-18T21:31:55.096549Z","times_seen":161,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":130,"dns":1,"connect":21,"send":0,"wait":55,"receive":27,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v67/4UaXrENHsxJlGDuGo1OIlL3L2JB874GPhFI9_IqmuTCKjshW690xre4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.ovnpay.vip/#/apps/view/join?id=NeSCQ9wj","date":"2026-03-22T17:14:25.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/googlesans/v67/4UaXrENHsxJlGDuGo1OIlL3L2JB874GPhFI9_IqmuTCKjshW690xre4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.ovnpay.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 60964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:07:06 GMT\r\nexpires: Mon, 22 Mar 2027 10:07:06 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Dec 2025 17:17:32 GMT\r\ncontent-type: font/woff2\r\nage: 25639\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 60964, version 1.0","md5":"24e7dcbc59c8a481d5563e33229e16ca","sha1":"b28fa7a9935ba1ed2b3bb972d8548b4d0f3860b8","sha256":"e267f9480bdd9fbddedc6d01edf6e1f08cb34dd6c7c58a2ab33dc40b38a39653","sha512":"75ecc17f1ed9debd7a0c00ff77c47971ed96ccb6a22f7ab0330f088553ef915350e0e492e9c54a13c8f404553ceee511cfcb3fb0749322a09bbc0802092994cf","ssdeep":"1536:lX6bTdC1TJ9yupV9Sivi4L/DgpYMp0WaaHK86L1dPR:8TqT7yupLSmbngpZoaq7L19R","tlshash":"cf5301b5c5ef1d298f9242afbe101185c733f3a5ca033f6c199123a58be49fa5bc2585","first_seen":"2026-01-07T20:27:09.519452Z","last_seen":"2026-05-18T21:31:55.037796Z","times_seen":12,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":120,"dns":0,"connect":21,"send":0,"wait":25,"receive":34,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}