{"report_id":"86b1a76b-373d-40b8-83d7-b0fb21d79b91","version":0,"status":"done","tags":[],"date":"2026-08-15T18:58:29Z","url":{"schema":"http","addr":"otponnline.mom/","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"otponnline.mom/?lang=hr","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"title":"OTP banka Internet bankarstvo","dom":{"size":19968,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (629)","md5":"c9142ce3c4fe8eef0eb9e9b992358ee1","sha1":"825a0d75f9ac410340b467f326e3e29fafb63bf6","sha256":"802c780480fec8aa9450cd4518ac5e0ba0c13c225504e850b67ef40409237a6f","sha512":"12dcd9bf8930b4cf919a3d6d0e59a06700609a1ecc9c0c27d310871f2a586be5f828f216cd0549decb7f509be4d96224ccf1e34cfbb3e5d01ce99abc877cce94","ssdeep":"384:WSxiGbx4xLWx0sk/O2UT13sjK9fnDCYqE2DOW3HHZJK:uWx0skW11FMHZJK","tlshash":"f2923f2078f50537404305d9aab53f3e1ee1d207c62f8a8635ad56ad0fc6e81bd67e2e","dom_hash":"domhash945c8f9d39a96f3a7ee7b70f8a7a105c","first_seen":"2026-08-15T18:58:35.375628Z","last_seen":"2026-08-15T20:41:14.873097Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"otponnline.mom/","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T18:58:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chat.someapiz.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chat.someapiz.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hardenedsteel.info","ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-08T14:08:02.73009Z","last_seen":"2026-06-18T12:30:31.667165Z","alert_count":0,"request_count":17,"received_data":25259,"sent_data":8078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"otponnline.mom","ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":114,"request_count":19,"received_data":986189,"sent_data":8510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"chat.someapiz.mom","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-02-27","domain_rank":0,"first_seen":"2026-06-18T12:30:28.458246Z","last_seen":"2026-06-18T12:30:28.458246Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-09T23:02:50.69879Z","alert_count":0,"request_count":1,"received_data":21561,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hardenedsteel.info/?sid=otpp","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dab2bfa954cc2d829c2f3e4bfb879f3b","sha1":"dab503de6f078ccd7fb187f907e417b3c6fa0803","sha256":"eb3a8f24c9206ea4e5abe0edfad1b01160e3f77ad45c13cb4d61756df68857a0","sha512":"363dd00b2a237590ed3f3ead9620d87f4e2d75e756e9e72cf5925ce069e0487f4cb051c5417bc2736f8ae4ea36092be7003ba47d98a1f42d38df9df3161c31e1","ssdeep":"192:UjppH6UkxSpqen3f2llERYIyW2D+WaXaeBJBwND1:SpHkvllUEDxII5","tlshash":"00320f0e65f310210ab7b07a9baba10836326117398acd117f9c56906f5dc6dd3b1fed","size":11245,"data":"","first_seen":"2026-08-15T18:58:35.399007Z","last_seen":"2026-08-15T20:41:14.909158Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/i18n.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78cfc33b4059126c01ee6957d5cb7c10","sha1":"29c357938c5dfc9234db9d195100ea58ae9adf84","sha256":"0eae7b0f9ae879899b3deb537f15f20d9bd3d76c5d6fc9aed49436f2d78557af","sha512":"b2e1bda759695366e1c292282ad60e47dc1c651ed78194bdbcdf1beb9ee35d97a1b88ccdae31ba7313b1dfc6a39996e8b7a0f8898ec111bc3d8d65c06191454d","ssdeep":"192:czhj5Vf0CUweIVRTi055K9I0KJ3LDzRSDG5WZvRDYrDIknRsnBrVADJCg4oHN6:EQqVRTbnvls7pRaXRQBpcJioHN6","tlshash":"e142d52c22862138499353ab7e5b5354267800178e09bd593f8dd2253fce91feab39ec","size":13067,"data":"","first_seen":"2026-08-15T18:58:35.407307Z","last_seen":"2026-08-15T20:41:14.887905Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/config.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c96e7a905542f9beb79220411c11ddec","sha1":"15f3d2cf9b0e8cbece0e7a101673b601ec0a06b5","sha256":"805bf4a72e9e0718a8f1d6dd0dcce53162fa73a4b7911d61707c6ee11ab0ffaf","sha512":"79a9346eb73b67d1e396332d28359c93c5db784a5d49c23741031bb062735fa41c058d22d5ea129055f3f436554f63ee06f95858850632518030baf260de973d","ssdeep":"","tlshash":"20b02282238a0003088208a2b22e3e0c320a23a3c00088023b80a800003c083a08b0ac","size":121,"data":"","first_seen":"2026-08-15T18:58:35.415468Z","last_seen":"2026-08-15T20:41:14.906899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/flow-utils.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2adc97c81ece83cb6efb1cd8b2099978","sha1":"a971a89631e8195e55e3a72a3f66fe32eb6f0ef7","sha256":"089db2e6fb075b2922f9370a57206b3e7b4c5d7f5365103d8efb6588836ce225","sha512":"2b5e54126a1efb5bd8d18c1ba516a9ebf753d61fd62febca9441ecbda2351ea3a79afa445a83eb3b19b4ae561ff42050fe8b2fec670b36bb6ef708964badaa63","ssdeep":"96:67Oh6RtoIFSUqy7Fde/ArOkAZj/fl9ZdbdQocKnjg7Dk4M7JoQx82LGI:67Oh6noIFSUqy7jrOkAZj/fl9ZdbdQoN","tlshash":"36912388f8d624514903a038859f5135bf3bc933089e8d92b41c53757facabd9abda8c","size":4560,"data":"","first_seen":"2026-08-15T18:58:35.402602Z","last_seen":"2026-08-15T20:41:14.907998Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4dd81e3ea186dec66267fe905b1f7a69","sha1":"e9c9d6a33b27351ca9351569b7aafce84f0afa78","sha256":"db1bc3d95b356a61707c6e3eae53dc1f401430a3bc9d83b803bbda72fa8687a1","sha512":"53d3db676ffbb2847af27c22f5ecad5e9d2df0cbb0cd4fedbbdf46c83991ff87f2a29d92a1aca1a5d07ddb222f807bd0eceacd22d803c768de11ca9e3c72fa5b","ssdeep":"","tlshash":"fcf09e6d1d436834555b216a773fa22c397790774252d5027c0dd8086f74617e31ede8","size":505,"data":"","first_seen":"2026-08-15T18:58:35.419631Z","last_seen":"2026-08-15T20:41:14.913008Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrcode-generator@1.4.4/qrcode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"170c5297533897f4793f676fd2d259d6","sha1":"2737b9ebcabf95d78765143c5884a8bfc02d8d68","sha256":"bb2365e4902f4f84852cf4025e6f6a60325a682aeafa43fb63b7fc8f098d1ef2","sha512":"d81245fe3ff64c823b25c1c03cc213ef8c0b43c05393936a786002e72a5e48a2dae95f7a69b025f3a82f72cad4d9eb5a3787edb5e850b5cc575c0ae26179430a","ssdeep":"384:IaP4fzjgPa+UnqrVps/af5RN9lHtAAdTRD4gUF4DRE4Ffe37nHHqsglqSX6bG8Sx:IgPPUn6FlHmF49E4F237nWZ38BB2","tlshash":"da92b795f3c9a2a55391ade2081f108be178dc627c1a8158ef32c4d2acb4bd5943bf78","size":20768,"data":"","first_seen":"2025-08-03T04:19:02.004917Z","last_seen":"2026-08-17T06:13:15.619668Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/qr-render.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74dda5ae47772aa92087cab51712f5da","sha1":"a925576c88dd383ab7e036828c9f65991c8bb63b","sha256":"1fad54cfe84992e48db657bbc0bdb2e7c55a1d43a6fbe8ca91ce3276bc4a7e19","sha512":"0f95287ef5c61a34e7ddd25d77e6123ecbe180684cdce19835e82196d59ff00da7f992d6e145b4613971ff5ec9500abe4ce90d49e8569cf1846341bc1eb1c4a4","ssdeep":"","tlshash":"a9510158bdd7a0004922501dbf7f68893294b01b050ced143e5cf76c4fec925a279f68","size":2536,"data":"","first_seen":"2026-08-15T18:58:35.387152Z","last_seen":"2026-08-15T20:41:14.911864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/dllgn-integration.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bce44d33ab152327adec68a6a47680b6","sha1":"27fb1e83c32e6643d4f1f274b564e77d1ffd7e83","sha256":"ad7dd03a7e2c4d26337b217e177550c080a65282df11b56bb286a32340b0031e","sha512":"2309196293db725c0e221702d01ad0b1540ca3cb858d91470ebf4a980724486803cbd62d05c9cbf2e4fdc867b9ac6cfdf80ba039f9ebe8b75b6a68c6da272d38","ssdeep":"768:JsuEGMXmpEqnA9Hj1ZeBh9BMZtFB7BwtByKBDBiBsn:JGqnA9oCw","tlshash":"cce2516a79fb10724963b43e4baf5058763289130089de117c6c82257fe1d786bb6fdc","size":32498,"data":"","first_seen":"2026-08-15T18:58:35.41842Z","last_seen":"2026-08-15T20:41:14.890597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hardenedsteel.info/api/heartbeat","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:23.210Z","timestamp":1786820303210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 52\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"session_id=f0rblpje1uamsuqnubo\u0026online_status=focused"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPQ1wuSriUIm%2FAK%2Fdd5LSoXB1iKUukUEkg95o%2BsUnDffHI7vTbyC7ta3VeGKsRKklpPEtv1wCSmPYZsUj8ZeIl2oCOrBxvN860ptm%2FGgVvgIW0rBuSTwp%2BSJvaXfh97UvG7vkfo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6e2f0ed85695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":744,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-08-20T06:55:41.404281Z","times_seen":86556,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/fonts.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.616Z","timestamp":1786820282616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/fonts.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 15:22:23 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70b22f-49b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWHgtTp7ZOqMiXsRF9YykykTM%2Bmh%2B4cFZfI%2B%2FlCT9uqylFrgL4Harwve%2BW46feM%2F42xsKneioghj%2BoZq4XX%2FGBWAvt9o8v%2BwNdYntJ0ZpNXAu4qlOcJlx2ls66Bq3GWjCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae5e755685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1179,"size_decoded":960,"mime_type":"text/css","magic":"ASCII text, with very long lines (1179), with no line terminators","md5":"0a95ef2acdf0ea26691ff0d1d33280c6","sha1":"979c0befcaa35bc61379d1ff34d67a14a29c251a","sha256":"fe98705af7d65f593e207eb9a2b7b182c4ffbf0f58587d1c7f165c1666efc074","sha512":"f67a9c7422bc80bfdfc4707b80176c86f52b82c9be295b5dd918eab6e823c82695c5f41acd5393ecf431c91f22473a9c7b487d622eb8ea18fd8a739165084518","ssdeep":"","tlshash":"33212b35042a940097f38d3520ca7907b42ce40456ba5867ee1d19ec8ec707b93a5726","first_seen":"2026-08-15T18:58:35.384386Z","last_seen":"2026-08-15T20:41:14.894041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/qr-render.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.903Z","timestamp":1786820282903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /js/qr-render.js HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Aug 2026 15:58:25 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a70baa1-9e8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDauYBUVjGN4ahqUyIja7PMNvmhkcj7caRVHHEw4%2FMgJSTkuEUKC1EvmmR2utVa3QRzne8faTswOywe8Zw6ZevSFBHhtWtuBxoXkb9ItqWnGK4ibyFBYJSpPWQhPHlVlIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db02e965685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2536,"size_decoded":1792,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"74dda5ae47772aa92087cab51712f5da","sha1":"a925576c88dd383ab7e036828c9f65991c8bb63b","sha256":"1fad54cfe84992e48db657bbc0bdb2e7c55a1d43a6fbe8ca91ce3276bc4a7e19","sha512":"0f95287ef5c61a34e7ddd25d77e6123ecbe180684cdce19835e82196d59ff00da7f992d6e145b4613971ff5ec9500abe4ce90d49e8569cf1846341bc1eb1c4a4","ssdeep":"","tlshash":"a9510158bdd7a0004922501dbf7f68893294b01b050ced143e5cf76c4fec925a279f68","first_seen":"2026-08-15T18:58:35.387152Z","last_seen":"2026-08-15T20:41:14.911864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/roboto-500.ttf","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.990Z","timestamp":1786820282990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/roboto-500.ttf HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otponnline.mom/static/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=3,i=?0\r\netag: \"6a70b216-27b1c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXW195Hxko2GVlVnlsW%2FOLdOABt%2FVW4vs8AgThoy7Nr8xw4lrZsn%2B7P6jurnuZIWBlooQw%2F73cQb4A42dYkQYB%2F48tPlNMNfVsISa8Tv4qCyVnAbBcpvFozEOc1mCGVXcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db0aeac5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162588,"size_decoded":163310,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.001152; 2014Roboto-","md5":"fe13e4170719c2fc586501e777bde143","sha1":"08bab5b1ab478e8af2279b613d3a32636b85cc65","sha256":"8559132c89ad51d8a2ba5b171887a44a7ba93776e205f553573de228e64b45f8","sha512":"c62dc07831278e29213c05d93439aacf7da7b741fc572c28851f9d392380c6d802e3147a388c4d7a3a0f359306e50cefc4b4e2b0b98b9235c73cb699bd6fd218","ssdeep":"3072:W9ft9EqMbvLI4bbciPR98xVlBe+EUOFkNc7fG8XONIqXizYSOL0TyEQ6+wV3iwD9:wF9DMbDJbciPR98x+jKc7+vSOL0ThQ9Q","tlshash":"9bf3e600d24aa768cad7b774e87c8bbe0475e42dbc4a710735d4ef310a88855eea95fc","first_seen":"2023-04-19T07:57:06Z","last_seen":"2026-08-18T10:12:02.850257Z","times_seen":347,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/roboto-700.ttf","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.991Z","timestamp":1786820282991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/roboto-700.ttf HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otponnline.mom/static/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=3,i=?0\r\netag: \"6a70b216-27aa0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1MSNTG2XUDYvg2bT4puOLZ5cC%2FW6dYZfQJHCREhrBEqBWi7uv8mTsISxZ46v88QWEIZQ3k6CU3HMU0PwqvNbkC5%2FSzd1RhQP89Ipy2sIAVQ03sAlLpV4sZ%2B7Nd6pWf0cZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db0aead5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162464,"size_decoded":163175,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.001150; 2014Roboto","md5":"d329cc8b34667f114a95422aaad1b063","sha1":"0a1793926e2ee724cf2ff3fc7adc745348659f82","sha256":"ef2ab0e402d5cb9de893e263a2c44e57f57fec3974b0d981bfe84dec3dae83a1","sha512":"34b78978f62fd447c60654e4be36877eb95ae9b7f616ca59858d2251c47825eeebeafd04d317d1e36d4c0fa9122a94d0140a81b2ee69fb08a3237eac4279bcfc","ssdeep":"3072:x6X+/XYXXXXXXP9kPbVQdSZr/OkS98QSADOy9w4zb4VB22knj+1NmLVhygfTZluN:x+yZQMOJZDboVB22k5zTW+w","tlshash":"4bf3f901e3539b18cacaa374ec7dcbbf5275e41d7c4ba5273494af324984840dea96bc","first_seen":"2023-04-19T07:57:06Z","last_seen":"2026-08-18T10:12:02.745741Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.someapiz.mom/widget.js?visible=true","fqdn":"chat.someapiz.mom","domain":"someapiz.mom","tld":"mom"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:03.209Z","timestamp":1786820283209,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /widget.js?visible=true HTTP/1.1\r\nHost: chat.someapiz.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T08:30:42.226003Z","times_seen":17987382,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chat.someapiz.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"chat.someapiz.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:21.210Z","timestamp":1786820301210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2BfqYDnFXqImb6fpDL%2FlJ%2F7e3GW0X6usMiSlXHa1MpihUjMeOj87GH%2BzeU%2BkgCbM3TMUIFBF8%2Fai5HJdT0Gctmtp6PihO9jEqpC4bTaSPpmjlQ9RPEd3qgRvjAIf7AoNvzQtjzY%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e228e855695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":828,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/logo.png","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.913Z","timestamp":1786820282913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/logo.png HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\nvary: accept-encoding\r\npriority: u=5,i\r\netag: W/\"6a70b216-24a8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2txPjGsz6PHp4WLkj5G3WKrE5JnOwZCRaeap%2B5gX%2Fd77V%2FoF7CmLt46%2BpdOrPK%2B0Thr0XDE%2FFLx78g4fWDp5iiwkenwAQC4IkXplmL1y8gKLYSqwSl%2Bt%2BRPFnrmh57p8QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db03e9c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9384,"size_decoded":10117,"mime_type":"image/png","magic":"PNG image data, 683 x 132, 8-bit/color RGBA, non-interlaced","md5":"5e4745612b89359f403a712fd9c6e81b","sha1":"1eac6217700b4210bba77cefce901d55b1bc1da7","sha256":"816706b43aea17b7745ab7eb08c8de804d844ef2805323f316e585ebdba572dd","sha512":"999e7644df943c5059a539f65304951bac14d23834ef496a7f25e52b0692107ae8e637e1db2d22b0dd6ea1c0ec446d50c1d0024e8fb1323f3664e97e7e81ec4a","ssdeep":"192:gSdEUp0XJOX6FdxJaGQoybUMoowVe8d1i2XqVqdCwYYnuhhuwIkdUDl:Hyu0XkX6jxoGwbxoo1ktqVqnYYMuw/dA","tlshash":"0f129ee4137982f4413b332d8a39b6f81edea72faa575180620b39ca3da74d591707c7","first_seen":"2026-08-15T18:58:35.394595Z","last_seen":"2026-08-15T20:41:14.900812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T18:58:02.109Z","timestamp":1786820282109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Mon, 03 Aug 2026 18:30:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcMI9OckICsSFyCh2XFF9%2F7PlcDN5HyyQ01MRfYAAJ5Oh2OyqGi%2FN0DXi6aTmddnMfbPfJIwHUl8KskNyCX15I0J1el5nrUekuUd9i6os2ctKvM35%2FOdmTcwZT3n%2F4BTeA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dac2e675685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":17370,"size_decoded":4965,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9c971cb25b1b3bfcf5f97f2da34a313d","sha1":"d5b70b70c3f15f51c3316f50492dd908473a9fa8","sha256":"ed17346a1e5594da5b60954eff2c1bc42195bbbd3f92c5650770cd1d37c70914","sha512":"5e5e0bc9713bf6c9536b68b5affd7ba3e7d35f7ac66a31b222c895e9e0ae8da3f3491935da2e4ff2adc8c66f04a69b3b50cda3a2589afa6321be9ac14f8dac78","ssdeep":"384:SSxiGGx4xLWx0snO2UT13UT/HDgoQHFGTCdAEZaS:dWx0sO11EEZaS","tlshash":"d172112074f40933400345d9aaf93e3e1de1d207c66f9a4676ac16ad0fc6e81bd67e6e","first_seen":"2026-08-15T18:58:35.396818Z","last_seen":"2026-08-15T20:41:14.910808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":132,"connect":19,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:03.716Z","timestamp":1786820283716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNE5ZdQHQBWPlSzYO1Q6FbLBgjC4tdrtuRA2YWnAa312zPxO%2B7tUj5px7PCn6dGvMOOu79e7%2FZhp1uo7ZFe%2Fg40zeGRyqYyT%2FFQ6WNAhFm5pclD6YVvB0LFOkdV8LDKkrLI7IvA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6db5388a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":824,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:07.209Z","timestamp":1786820287209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSvNnVN%2B%2B1UxVFmLEMJe0XxenaF34Z6G5%2Fnl7B%2By%2BsfdPOLkedzPjlRe9msOkwLV3EMYGevWJdl3KBNA7bTqpJBK4%2B5lBC47G55k4n7uuFRUW8HUGf5vd4KE1XsDVoTowyswjnE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dcb09c75695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":828,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:13.210Z","timestamp":1786820293210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UE3C3QPaGRln74aVWaTbtvMnOYPba6jz6G%2Bd%2BIcCjpFP3%2F4tseBY81eChGCDpzZhbo8abw3FOnfRukJS6UHG4%2BJ08fu4Ekr8ucHXdvs6OP60XLp%2BTyxXpQxn%2F%2BOVEOl2MJvCBwQ%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6df08c625695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":830,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/?sid=otpp","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:03.004Z","timestamp":1786820283004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /?sid=otpp HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35JAsVF87FUvSA8TC9BhWFNngb5lW63ykYqFBKU3w0ggAAfasef6qVGes6gmS7DIA1aVRCywLMVVC4URnKhHM%2FvseCtYpeuIQveq1gA6ci2Sv%2FhJvl4%2BxQT1gRog5d2xjECi0Wg%3D\"}]}\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6db16f36120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11245,"size_decoded":3903,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"dab2bfa954cc2d829c2f3e4bfb879f3b","sha1":"dab503de6f078ccd7fb187f907e417b3c6fa0803","sha256":"eb3a8f24c9206ea4e5abe0edfad1b01160e3f77ad45c13cb4d61756df68857a0","sha512":"363dd00b2a237590ed3f3ead9620d87f4e2d75e756e9e72cf5925ce069e0487f4cb051c5417bc2736f8ae4ea36092be7003ba47d98a1f42d38df9df3161c31e1","ssdeep":"192:UjppH6UkxSpqen3f2llERYIyW2D+WaXaeBJBwND1:SpHkvllUEDxII5","tlshash":"00320f0e65f310210ab7b07a9baba10836326117398acd117f9c56906f5dc6dd3b1fed","first_seen":"2026-08-15T18:58:35.399007Z","last_seen":"2026-08-15T20:41:14.909158Z","times_seen":2,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":83,"connect":24,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/favicon.ico","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:03.204Z","timestamp":1786820283204,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/favicon.ico HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: image/x-icon\r\netag: W/\"6a70b216-8be\"\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywqkxzrWDnwLieYjv95oCYUJL6Y40AQ7olxfU5xPH6bEdz2PYHazX2wObNynfcW6QpCtf6OWTTOk1IW3MIS3ms4ymcjdX%2BQpAX%2FEmb1kUSgHLx%2BndnbvSMdCPzlCoPPzbw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6db20ed55685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2238,"size_decoded":1935,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32","md5":"662c648b0bb6e8911585d82989ff7c46","sha1":"6acff34417ab857ab40d20518f64e583e9879349","sha256":"c6e87aa4d892e27dfebf972f5b162c4511fa46c05b34ee7a351c97b795fd1603","sha512":"295d09e7ed26298227d45379103e9d8e7d670a022bda552ffdb016def290a509b5773f1efa7093cfccd24c01f825e113f941f9647a26c974187bd122f3fa7363","ssdeep":"","tlshash":"d2414ecc06031a5bc2e46771333d3ae49de8daef531cf490a875bd7c26904649a172ca","first_seen":"2023-05-05T02:02:55Z","last_seen":"2026-08-15T20:41:14.903653Z","times_seen":60,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:09.208Z","timestamp":1786820289208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FU3WXhCBLXkMpVHfYjHoTmAqvSZ5K9gxJfFklFPaYqgRDw%2FC%2F9vFyiPz%2BLrFuC9bRCrboZi8gr2Kw88sSTRrha7KLrHyLYKFsDW5y7R%2FxAwSPUjLqniNkoaD7TD1tcEkLZkHLTQ%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dd78a845695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":826,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:19.210Z","timestamp":1786820299210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNxgtEW7Y8FHmWyujqRUR5eMqKfOKN5PpSJ7tJJXertJB4k8O0zfuo%2F0sDDCy2uI%2BsjH0wMDvsqXX%2FFXgpImPykpc1DGt3n7BnDneBdKQgEzP%2BTREdMVqTn7Ou7UHHAvvDECwFU%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e160e195695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":824,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:23.214Z","timestamp":1786820303214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8%2F3jKZQcYyxzvQKlsTv%2FRnZZl2GQvO27VMgQeTDEAY1AIxZRB1k0dGE0ySZooTgAi7v5XSCbH1bIvCMgQbVrn7%2FG7qBg20%2B%2BaXy9DfGmTy32pQv2Is1L6RY9SgVI0ZOdl0wGDE%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e2f1eda5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":826,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:25.210Z","timestamp":1786820305210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZzdZMgMd6C58eHus8VPrVXLiF4gJ8OpW%2Fe9A7bky1ZC1PY2cKCLbjJ0UZGibT9sRWYVhqI042dkk0MVOMLE5mVXJ%2Fe87gDfsQtM6OF8lTmFh7Zkx2TGnl3NVAOpWdscWsWA%2BbIA%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e3b8f695695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":822,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/flow-utils.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.898Z","timestamp":1786820282898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /js/flow-utils.js HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Aug 2026 17:57:23 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a70d683-11d0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rohi78kn7tPo1%2BAIfScmxYiicUHjBiZrY1s7%2Fp0nUBGA9glLlVCrFaqEcg7qBR1pV2Z2QsbY4LBwE6g5mQxhePJtn5gTd5hOyNKgtLa0cp9KPhXHu94Pf1aco6twqm1v8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db01e955685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4560,"size_decoded":2368,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"2adc97c81ece83cb6efb1cd8b2099978","sha1":"a971a89631e8195e55e3a72a3f66fe32eb6f0ef7","sha256":"089db2e6fb075b2922f9370a57206b3e7b4c5d7f5365103d8efb6588836ce225","sha512":"2b5e54126a1efb5bd8d18c1ba516a9ebf753d61fd62febca9441ecbda2351ea3a79afa445a83eb3b19b4ae561ff42050fe8b2fec670b36bb6ef708964badaa63","ssdeep":"96:67Oh6RtoIFSUqy7Fde/ArOkAZj/fl9ZdbdQocKnjg7Dk4M7JoQx82LGI:67Oh6noIFSUqy7jrOkAZj/fl9ZdbdQoN","tlshash":"36912388f8d624514903a038859f5135bf3bc933089e8d92b41c53757facabd9abda8c","first_seen":"2026-08-15T18:58:35.402602Z","last_seen":"2026-08-15T20:41:14.907998Z","times_seen":2,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/bootstrap.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.618Z","timestamp":1786820282618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/bootstrap.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70b216-8759\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QSOvL7%2BiLc59a1pyzF0k10pOWW9dEX5E2kWPeVr7hSsKJL%2FoUGPR4WU1CzzsTwCxE8CbvZqKl8jk81xNnkzCRUIUPyACqNT1%2FQIjbBw8iS9s%2BUYnzyJXcVnHQRzMiJeJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae5e765685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34649,"size_decoded":8762,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33955)","md5":"0a5a7a2d291ded6fd8c0a277c61c4336","sha1":"3628db5e7f6c629a04ece90e113d080a6b491b1f","sha256":"ef322bdbfba4caf7d84bd45add85ab0dfb37b13d6ba8b49317f9d361b07f407e","sha512":"b094846c8bdc664ae15e137fb538de8defacea05fb43d0fd1d40dd528a0a7559c4a5223eab5d8ace18c59d335e564d5cc901825c8aa222f7d63a0e4ce691dd1d","ssdeep":"384:fq+Yw3XkyCdbPVq5EwPmxVVYgl07uGNOgeqPm6aeSaOeRf0uotPz6Q3X67Naym:yOkbNQnf9eqPOeSaOKoVz6QmNaZ","tlshash":"52f2f1a0f18a30da7363c41a9390b69d135af2e5dd810f76f27f619c4fe62941392f26","first_seen":"2026-08-15T18:58:35.404255Z","last_seen":"2026-08-15T20:41:14.899597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/otp-login.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.619Z","timestamp":1786820282619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/otp-login.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70b216-1579\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0v6LXtf3Zc0NSi1IQWk12UGSW7NDYsD0vcwGmHyl43Xop5NPLloQ7jZja3ZYT%2F6h1zM4X9eEj%2F84RE8Kcf7VpXmMc2pZZuQjNs8JSXHlSE2UDtNR8ReDVlRDj2idgUn1Cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae5e775685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5497,"size_decoded":2384,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5493), with no line terminators","md5":"1de7e317befd5ee3bdf25ea73f5cba61","sha1":"85834119f118f14c8d2adc979456a5701aa19c9e","sha256":"a54e2aed0536537121195b791d58511a298ae84e7a91bad568edcd0c04971c8a","sha512":"847f588d351709d9e424c9232987c35b636d69ca1e710f46ac7190be29f0ee089c9190f806abd96de3ad29ac5f84a34123cf619eda617da44841558f417df16c","ssdeep":"96:IoavA5INSAQ97JGyQ8wZs+u2sslcrCslE8LRFUNfn1f90q0vRFDhNTJ:UvNBWJGyQ8wZsYsy81FUtn1n0vRFDhNt","tlshash":"aab12136b8483c4ce137c21de48c169c352e1626fe129fbff9a225f6cac51a47753a09","first_seen":"2026-08-15T18:58:35.405887Z","last_seen":"2026-08-15T20:41:14.902174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/i18n.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.625Z","timestamp":1786820282625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /js/i18n.js HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Aug 2026 18:04:51 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a70d843-3316\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bd5oE5DoeY3mNH18KL%2FC2rUVbBhUovvB2y74WYJ20LdLh0tZJEcESTzVaOcTENdla8ofeO1apf22yKyMDk7GLxCc5cILFFZ0jDjT57%2FHRvr3gfjaJrazR%2BWPxwVwQLQrHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae6e7b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13078,"size_decoded":5705,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (392)","md5":"78cfc33b4059126c01ee6957d5cb7c10","sha1":"29c357938c5dfc9234db9d195100ea58ae9adf84","sha256":"0eae7b0f9ae879899b3deb537f15f20d9bd3d76c5d6fc9aed49436f2d78557af","sha512":"b2e1bda759695366e1c292282ad60e47dc1c651ed78194bdbcdf1beb9ee35d97a1b88ccdae31ba7313b1dfc6a39996e8b7a0f8898ec111bc3d8d65c06191454d","ssdeep":"192:czhj5Vf0CUweIVRTi055K9I0KJ3LDzRSDG5WZvRDYrDIknRsnBrVADJCg4oHN6:EQqVRTbnvls7pRaXRQBpcJioHN6","tlshash":"e142d52c22862138499353ab7e5b5354267800178e09bd593f8dd2253fce91feab39ec","first_seen":"2026-08-15T18:58:35.407307Z","last_seen":"2026-08-15T20:41:14.887905Z","times_seen":2,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/roboto-400.ttf","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.987Z","timestamp":1786820282987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/roboto-400.ttf HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otponnline.mom/static/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=3,i=?0\r\netag: \"6a70b216-27c3c\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULkWcvbwcPueewFF5XUeyoTBts5AtaB4J4hxWIBJk5jyyKswbB5LMS9M1nNbvMeiGvH28SN0SOnvaS0OP0tZI0SK8BOsUYsOzemLUMgoXFXibPjjkUbxPxYrtuILOjPKEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db0aea95685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162876,"size_decoded":163588,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.001101; 2014Roboto-Regular","md5":"ac3f799d5bbaf5196fab15ab8de8431c","sha1":"cb0cb91a31f43293bd7042ddab945ce161c29d3d","sha256":"f0e5a21bf5c95e4c1bce2be98a3656ebcc6d42a21f41c4e3ebf69dd815702e54","sha512":"a8b7f0f8759fce064b8576429a59a0b18bfc7a6aa3b140af43ec665ffaad2a1cb27a2bd745435113894ec5d607a3ea706f92c19ca5a233d87f464362dd6063cb","ssdeep":"3072:jgWSNgHPoqWL1MMeFchiZ414XtvlbjybHp/rGazzxla34cS2FXzyuDAbM5hDWH3b:jrsHYt56Nklyuk8WMoBiul","tlshash":"28f30901d247ba28c6d6b374dc3d9bbe44b5e82dbd8a601771949f3109c8c14cfaa5be","first_seen":"2023-04-05T12:35:05Z","last_seen":"2026-08-20T08:49:15.968193Z","times_seen":2509,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:11.209Z","timestamp":1786820291209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROFI7B3XA0vwOb%2FvJz0TMSmkYj03udggeRZB0MwP2wOVMbfkWvgNegUq5IEwwThckRelhw2K3xcO9aQkVLGHXRa3xwsjSod0DE0wU5pBlowcyFsXY%2Fp%2BBA324fjdzpeIRFLDPco%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6de40b5d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":822,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:17.209Z","timestamp":1786820297209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d8YLVEv%2BlrJNXtt4zL2%2Fza05NSbV6agPo2edi8SfPRfmgnm%2BzejcVWdTq3%2BnlasQIjvOispi9HHSskACqjk9rMunHTI%2BL1afPwML570ncoZgzyjYQbpdR2HQjTIkPKCTE1vTfyw%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e098d9d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":826,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/qrcode-generator@1.4.4/qrcode.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.901Z","timestamp":1786820282901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/qrcode-generator@1.4.4/qrcode.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.4.4\r\nx-jsd-version-type: version\r\netag: W/\"5120-Jze568q/ldeHZRQ8WISov8AtjWg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\nage: 1629847\r\nx-served-by: cache-fra-eddf8230097-FRA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7722\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20768,"size_decoded":8515,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20399)","md5":"170c5297533897f4793f676fd2d259d6","sha1":"2737b9ebcabf95d78765143c5884a8bfc02d8d68","sha256":"bb2365e4902f4f84852cf4025e6f6a60325a682aeafa43fb63b7fc8f098d1ef2","sha512":"d81245fe3ff64c823b25c1c03cc213ef8c0b43c05393936a786002e72a5e48a2dae95f7a69b025f3a82f72cad4d9eb5a3787edb5e850b5cc575c0ae26179430a","ssdeep":"384:IaP4fzjgPa+UnqrVps/af5RN9lHtAAdTRD4gUF4DRE4Ffe37nHHqsglqSX6bG8Sx:IgPPUn6FlHmF49E4F237nWZ38BB2","tlshash":"da92b795f3c9a2a55391ade2081f108be178dc627c1a8158ef32c4d2acb4bd5943bf78","first_seen":"2025-08-03T04:19:02.004917Z","last_seen":"2026-08-17T06:13:15.619668Z","times_seen":69,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":10,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:27.211Z","timestamp":1786820307211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4zc8N1i9hQ%2BPrU2gZL%2BfTfPennOctcDAjd33Z2zFMV95YHm37aGtCyuNywhvlzNsGxiEyd8Rrq847rC%2Fu9BLQXFvwuwxSc2oRtxF7%2BBqZZzK%2BFWkhZGoULXi5ouYuxO%2FE4UMYio%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6e4818595695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":828,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/superfish.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.621Z","timestamp":1786820282621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/superfish.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70b216-50b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xujbR%2BDGbNTkB2tEdX1nQ2W5HxbC3lcvrE0umuKlJoox9KQRjYXI0wh%2BIwRE1fJ%2BOoAMmgXrnRIx3EbE4pZ%2BsFFj8GRJcohhEd5Q546uIPhZVRWaTlOoZZDa0PiI7iSDaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae5e785685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1291,"size_decoded":1226,"mime_type":"text/css","magic":"ASCII text, with very long lines (1291), with no line terminators","md5":"c5a0f51c601c9adfc04c1f48626fd967","sha1":"e168b26296f2fa207feeccc877431079cc1e3272","sha256":"15ed4b5ac66c428e16bc695bd93700dde725239f45d3c7f35b1c3c9e096637da","sha512":"b97c9d2ba01ec2c440f2b2fed1b0d53aa0d8e584e088c632e7497ece30ae8b08f1b841348512c37a4838effa71c049a701ded1132e9412db84e888744553b9b3","ssdeep":"","tlshash":"9321ed32e2c0610c676fe33e54a9b59e3639c254efab0345bb13d5108e8b2ac19e74c9","first_seen":"2026-08-15T18:58:35.410405Z","last_seen":"2026-08-15T20:41:14.883268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/font-awesome.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.622Z","timestamp":1786820282622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/font-awesome.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70b216-60f7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4vo8spcLwqcsLeBytWbjZSMDFscGCY9OMRxNOMPKRCmJJZGZiKTZRVT0aBgV06LS%2BHiKDZBpCzphIQtU5sGecpJhJsF1GVTZKiAmQqfPVxlc8fR6pBtZoQgwA1KheFph%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae5e795685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24823,"size_decoded":7128,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (23361)","md5":"a76ef839de8d2446a6bbb4925ffa1291","sha1":"0504bbc6a5dac06867e360d29ef8f60940fd3e12","sha256":"bee99a53cdc5d201464df2d7794338de01e62912d8a163bdcf065bd192d5bfd4","sha512":"54c58c0d19667f2d959627f0fda1fbbe7c104ee7cf68e05004dec4eac035b89dc199400ca65f14ad5b694f9adb3d68838479f21ebba2193990f610e19a0be49c","ssdeep":"192:BqZFJzlS+9z8K/6/+g5rwr2ynO6mJ85ZXM01kTO0R/5Zuz6phBshfElFJpzLVqNy:AS+98+o+g5kqf85ZXDkTO4k6p/saFJLh","tlshash":"19b2e8f8e14c08e9a375cc4bc711b368623af771d1815ca8f05fda4dafc225926c9b69","first_seen":"2026-08-15T18:58:35.411912Z","last_seen":"2026-08-15T20:41:14.895682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/css/dllgn-flow.css","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.623Z","timestamp":1786820282623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /css/dllgn-flow.css HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 03 Aug 2026 18:53:14 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a70e39a-27b0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIOaOiI2eAIVYTWf8icaoSIZCZ6MdJg7fZd%2FaVI5NvFlDC6CmveJBKEX%2BsRFF1qZ6fywyAId4mhlrEpPPlFsh70L%2B2lK5KThBYH7OYQ23iw3S%2Bxt5Uzf4lOg%2FdP0bO1o1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6dae6e7a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10160,"size_decoded":3550,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"febe1cc4692019ed9792de9c9e514b62","sha1":"ce7687f7cb5b8115b2bd39bb100e338e99142b71","sha256":"55d7683d19a1a2b567a37350b558afd7616a9520b73429fca0b238373d106c53","sha512":"5cb717d05389bc1a0fbc14e0415c715b75aa13377d509b915a34c0caa8f962117a034a4a5dee96fcfe8e0f4288f23e8e9656c3db405fbb86dc2279b7719ef8a4","ssdeep":"192:wB4WnsBWH2JRPXwKnXXlZcnPaZ2werxWXRCFSqa3:KNn7+XXlQw2S/3","tlshash":"8a22fee37bb80534b80a88a46152afdb6bdd4047511edd794be0202cbfcc2956b77b8c","first_seen":"2026-08-15T18:58:35.41366Z","last_seen":"2026-08-15T20:41:14.885742Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/config.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.626Z","timestamp":1786820282626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a70b61a-79\"\r\nlast-modified: Mon, 03 Aug 2026 15:39:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TS9dWw0hF73oGGISnRKGsFCNjRwYVh7fA2W4CtMPHUAE5wa0tTF9948Efccw3McUVVKTCJMqR8W%2F2pZIg4GzU07XBX0IvPrpP3R7Bnqr2pgoYF%2FBoHCu8%2BqD%2BkXFd53hQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dae6e7c5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":829,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c96e7a905542f9beb79220411c11ddec","sha1":"15f3d2cf9b0e8cbece0e7a101673b601ec0a06b5","sha256":"805bf4a72e9e0718a8f1d6dd0dcce53162fa73a4b7911d61707c6ee11ab0ffaf","sha512":"79a9346eb73b67d1e396332d28359c93c5db784a5d49c23741031bb062735fa41c058d22d5ea129055f3f436554f63ee06f95858850632518030baf260de973d","ssdeep":"","tlshash":"20b02282238a0003088208a2b22e3e0c320a23a3c00088023b80a800003c083a08b0ac","first_seen":"2026-08-15T18:58:35.415468Z","last_seen":"2026-08-15T20:41:14.906899Z","times_seen":2,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/roboto-400.ttf","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.985Z","timestamp":1786820282985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/roboto-400.ttf HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otponnline.mom/static/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=3,i=?0\r\netag: \"6a70b216-27c3c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FJ6O1IUnxoS7GKX8%2FptnBKglKGCeMRp6OXFziL%2BYLbBVovTsCUNdRfz5TeScs5gGhje44I8c342F9PZqz9MdA4K7pc5g%2BS9ibtlSrd%2BbXYH3ZYnpT4E0ql7BLHDSA%2FWQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db0aea85685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162876\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162876,"size_decoded":163593,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.001101; 2014Roboto-Regular","md5":"ac3f799d5bbaf5196fab15ab8de8431c","sha1":"cb0cb91a31f43293bd7042ddab945ce161c29d3d","sha256":"f0e5a21bf5c95e4c1bce2be98a3656ebcc6d42a21f41c4e3ebf69dd815702e54","sha512":"a8b7f0f8759fce064b8576429a59a0b18bfc7a6aa3b140af43ec665ffaad2a1cb27a2bd745435113894ec5d607a3ea706f92c19ca5a233d87f464362dd6063cb","ssdeep":"3072:jgWSNgHPoqWL1MMeFchiZ414XtvlbjybHp/rGazzxla34cS2FXzyuDAbM5hDWH3b:jrsHYt56Nklyuk8WMoBiul","tlshash":"28f30901d247ba28c6d6b374dc3d9bbe44b5e82dbd8a601771949f3109c8c14cfaa5be","first_seen":"2023-04-05T12:35:05Z","last_seen":"2026-08-20T08:49:15.968193Z","times_seen":2509,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/static/roboto-500.ttf","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.988Z","timestamp":1786820282988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /static/roboto-500.ttf HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otponnline.mom/static/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 03 Aug 2026 15:21:58 GMT\r\npriority: u=3,i=?0\r\netag: \"6a70b216-27b1c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6q8Wb%2FSh1rfBSjh%2BeXhiNHClzlRrHrqUF%2Fsrf3czte09ZuEtxggme6PSTjDIyw0gWjfdoWVuHXj4W9nsT0OpvQH9ypbBd3MWn2zQFiK0i%2F4GKPTAUQFBQ3gprwJ0PNLzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db0aeaa5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162588,"size_decoded":163301,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"GPOS\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto MediumRegularVersion 2.001152; 2014Roboto-","md5":"fe13e4170719c2fc586501e777bde143","sha1":"08bab5b1ab478e8af2279b613d3a32636b85cc65","sha256":"8559132c89ad51d8a2ba5b171887a44a7ba93776e205f553573de228e64b45f8","sha512":"c62dc07831278e29213c05d93439aacf7da7b741fc572c28851f9d392380c6d802e3147a388c4d7a3a0f359306e50cefc4b4e2b0b98b9235c73cb699bd6fd218","ssdeep":"3072:W9ft9EqMbvLI4bbciPR98xVlBe+EUOFkNc7fG8XONIqXizYSOL0TyEQ6+wV3iwD9:wF9DMbDJbciPR98x+jKc7+vSOL0ThQ9Q","tlshash":"9bf3e600d24aa768cad7b774e87c8bbe0475e42dbc4a710735d4ef310a88855eea95fc","first_seen":"2023-04-19T07:57:06Z","last_seen":"2026-08-18T10:12:02.850257Z","times_seen":347,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/init","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:03.211Z","timestamp":1786820283211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"POST /api/init HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 46\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":46,"data":"session_id=f0rblpje1uamsuqnubo\u0026service_id=otpp"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbZeKzGSXWecu2CYxBW6TIYeACTJmq7cBB%2B7QGMD6HXyGU2fOtZ2JXXQ1lbMFWgRrUa1vQfpeoxvo1IGMkKPYAUxlbRYlkQeTMwM8BpL%2B%2F%2BPlhQgZXMRY3z0g0TrwGsPNwmlCvE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db238765695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35,"size_decoded":760,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c5e04f62cdd92fe89391cdcb145af22c","sha1":"bf677eef21efc68afead5415055f78c473a6d19b","sha256":"e04187ccbfeef64c984325002e6e5d46fb3da208bf118f0fdc17ed7f8b9360b5","sha512":"fb862b267e9a3843334d88e4bf6a2bbf11f1e6de903aee9b9e6df30df7afd10753f93fbe5fcb4ad3ca6f11d365bd610bbd082013a3644ef96cea27cf27d8f163","ssdeep":"","tlshash":"29800003e00a03b232b2f20a8238382228b008a2820c003c830822a8ea0038232a2208","first_seen":"2026-08-15T18:58:35.416999Z","last_seen":"2026-08-15T20:41:14.905775Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:05.212Z","timestamp":1786820285212,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EHdoWvuIOXzWzClUdUybj%2FNFkGHShcv8Zrhu0bRd0tzd0C6If2DhSLbKYeK7pFcIEN4pn0g04bmMfwsFH54fraX8MjalTM31uH6jRE3tcYx7c2BPUr2Wplc8aVTtEK52Nhxy7T0%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dbe88dc5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":818,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otponnline.mom/js/dllgn-integration.js","fqdn":"otponnline.mom","domain":"otponnline.mom","tld":"mom"},"ip":{"addr":"172.67.221.246","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:02.905Z","timestamp":1786820282905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"otponnline.mom","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 11 Aug 2026 09:34:56 GMT","end":"Mon, 09 Nov 2026 10:33:20 GMT"},"fingerprint":{"sha1":"38:F5:78:B2:39:DA:62:DE:0B:12:C0:B2:B1:3C:98:61:7C:35:C4:A9","sha256":"4B:8F:EB:7C:26:EF:A8:3F:8F:41:AD:59:03:FB:FE:8F:A0:2D:69:37:24:3C:87:0E:03:DF:78:EE:30:27:7A:87"}}},"request":{"raw":"GET /js/dllgn-integration.js HTTP/1.1\r\nHost: otponnline.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 03 Aug 2026 18:04:57 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"6a70d849-7ef2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=agVAn0CK6Ywvw79LWPHMb56bIAczRS8Y4CibRj7bIBPL6y8ldDsBJSq8Mxtn9TnyHcllE0KIDEwIiKoTjODlC4m86RH4Y%2B1OnSIxd4ERGt8QbYvWzmHBsfgN7oBFckHBvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6db02e995685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32498,"size_decoded":8654,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bce44d33ab152327adec68a6a47680b6","sha1":"27fb1e83c32e6643d4f1f274b564e77d1ffd7e83","sha256":"ad7dd03a7e2c4d26337b217e177550c080a65282df11b56bb286a32340b0031e","sha512":"2309196293db725c0e221702d01ad0b1540ca3cb858d91470ebf4a980724486803cbd62d05c9cbf2e4fdc867b9ac6cfdf80ba039f9ebe8b75b6a68c6da272d38","ssdeep":"768:JsuEGMXmpEqnA9Hj1ZeBh9BMZtFB7BwtByKBDBiBsn:JGqnA9oCw","tlshash":"cce2516a79fb10724963b43e4baf5058763289130089de117c6c82257fe1d786bb6fdc","first_seen":"2026-08-15T18:58:35.41842Z","last_seen":"2026-08-15T20:41:14.890597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-15","alert":"Phishing Block","trigger":"otponnline.mom","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"otponnline.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/heartbeat","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:13.207Z","timestamp":1786820293207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"POST /api/heartbeat HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 52\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":52,"data":"session_id=f0rblpje1uamsuqnubo\u0026online_status=focused"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVeFKSuVvPXPhO69g5EHxWMk6lZJjNfWZtcgrR2kCdCVVqlnNSfhmZ4sVfAeTiW6xAzj5JJWY5LsniCKWZUXPzo846xKzP6Jwfss4fmwkg2otzkQqCVm3G3M8S3Rv343moi56Cg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2ba6df08c615695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":734,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-08-20T06:55:41.404281Z","times_seen":86556,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hardenedsteel.info/api/check_status?session_id=f0rblpje1uamsuqnubo","fqdn":"hardenedsteel.info","domain":"hardenedsteel.info","tld":"info"},"ip":{"addr":"172.67.216.244","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://otponnline.mom/","date":"2026-08-15T18:58:15.209Z","timestamp":1786820295209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hardenedsteel.info","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Jun 2026 14:20:00 GMT","end":"Sat, 26 Sep 2026 14:19:59 GMT"},"fingerprint":{"sha1":"20:36:26:72:BF:F3:22:3C:0B:90:1D:04:FD:2A:EA:16:7E:43:66:7A","sha256":"17:3D:1E:A3:B1:41:E7:62:75:08:F9:34:94:0D:F9:B3:5A:43:02:86:2B:F5:CD:E0:2D:ED:E8:E1:B1:D9:ED:43"}}},"request":{"raw":"GET /api/check_status?session_id=f0rblpje1uamsuqnubo HTTP/1.1\r\nHost: hardenedsteel.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://otponnline.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 15 Aug 2026 18:58:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nfgoy0L7OO3EH4pFPF4UtLZ6TWNcJUI5v3xEjdRH5pdjNxiUZMJCR5yMlHFUSUXFpGvabl0Eyb4SsxbaAAGOieO7re2Cen198V2NBfVv1dmdb4hBQtnOEFQKt7hMs2zyUd9EBuk%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a2ba6dfd0d0b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":816,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b848dc1f1c2d18e8adb66f537f5d9720","sha1":"278a3e7c61bffbb57d7914c2750df4e3603e09f5","sha256":"5e41f0405a248e29130c4e93a224d2d4006eda2d8391f878c3145994ee363ed1","sha512":"8c2aa462f230a7b40297305c31091fe9ddd9a50606e540b68acecf5a99de5d6ece87a96e37843b1348b3178a457d8f8824531e34d0a929c57e1f1d10451207e3","ssdeep":"","tlshash":"52b01232b11b6473d7f0375921693c37e5662921924d193cc74c966ce5ff258b14602f","first_seen":"2026-08-15T18:58:35.392821Z","last_seen":"2026-08-15T20:41:14.880294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}