{"report_id":"96365f70-a32e-44c2-9d5e-cfa646f11436","version":0,"status":"done","tags":[],"date":"2026-08-19T22:46:53Z","url":{"schema":"http","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":0,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"final":{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"title":"【New message】Coinbase OTC","dom":{"size":11270,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (355)","md5":"5a7c67a359217e115f4a7b87ae315d86","sha1":"2110adef0460507e6745ace907cd462afdc88210","sha256":"b5e86a26db25635f71f18bddf58684018370efdcdff3bdf307056c565a562924","sha512":"31f830864a30ca0c27ead6fa68d004217af9ec605e58e04fd57ea33873ee7a2cf32c32adeccb760f80e04ce4b8ed5bbabf1a5c57fd68bc883018f200f9783a75","ssdeep":"192:Nf7fwa7t6bznYoajsa5gNmVwW+i4S0mLAcc/RIv/0tc/RaMbnQrafSaJr8/Pzeyx:HQySLkf0j","tlshash":"f432a6351573501b1613b1591fee270a3671e10b891adcba3fdc83548fc5ade49f2ba8","dom_hash":"domhash1d79465d7177b18be76f71351a3bd570","first_seen":"2026-08-19T22:47:22.78793Z","last_seen":"2026-08-19T22:47:22.78793Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":0,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T22:46:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-08-17T23:26:02.954293Z","alert_count":0,"request_count":8,"received_data":6720,"sent_data":6862,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-08-13T17:26:51.390614Z","alert_count":0,"request_count":1,"received_data":826,"sent_data":714,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"widget.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":0,"first_seen":"2026-05-14T12:23:01.692825Z","last_seen":"2026-08-18T11:33:53.027496Z","alert_count":0,"request_count":3,"received_data":7048,"sent_data":2125,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mix-ads.oss-accelerate.aliyuncs.com","ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"domain_registered":"2012-04-01","domain_rank":5285889,"first_seen":"2026-05-14T23:47:06.027768Z","last_seen":"2026-08-18T11:33:36.471964Z","alert_count":0,"request_count":2,"received_data":34127,"sent_data":1252,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"otcdd.com","ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"domain_registered":"2025-12-01","domain_rank":0,"first_seen":"2026-08-19T22:47:11.934013Z","last_seen":"2026-08-19T22:47:11.934013Z","alert_count":0,"request_count":44,"received_data":20267757,"sent_data":21934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-08-19T03:18:42.450867Z","alert_count":0,"request_count":4,"received_data":169940,"sent_data":2151,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-08-19T03:18:42.388421Z","alert_count":0,"request_count":9,"received_data":5780,"sent_data":7080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.drdsy.com","ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":416,"sent_data":1148,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"34ff98be9f9685f1d5edfdea01b502a7","sha1":"5a9c2231465585e4041d6a76eae0e0a15d10af15","sha256":"c3292c29945fcfe65c4f2d4d0ac6934a9ab1b09dbedf535fbb9f58b46f500497","sha512":"aab1223f7481510c514d6258ad7d4fb80d4a50c44ebe5c32b99b863887f925ce8954a28100d1ef5095c3583f32feef82f17290ffadd44b50f18f071510ea7491","ssdeep":"","tlshash":"19b0922005a0043a00f811389b367f997622723180982737feedda3b3f2218381807c0","size":120,"data":"","first_seen":"2026-08-19T22:47:22.882472Z","last_seen":"2026-08-19T22:47:22.882472Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"c600e1af0d59a0fff7d994161c423de2","sha1":"bfda62bea5242dd807077812738e85ea3ac27757","sha256":"cad8be7c4cdd2fa7fa67b35358663a8b3d041d71dd87201d4efa7a4a07cf958b","sha512":"9d9f4af237b70ae58046bbbb2672a0780ade99229808c74d08f787732fddd5c81f2d196246b43f7652e74d6dc745537c180ebdd2fd9887a7b6188fc67f926c79","ssdeep":"","tlshash":"dc01283516a4883b056b60392f0fbbc571231903876dea20bf0ec75a6f30997c8592c6","size":664,"data":"","first_seen":"2026-08-19T22:47:22.885051Z","last_seen":"2026-08-19T22:47:22.885051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae996e10bf00d8fc87bf06f842d68ce1","sha1":"24ebe87798650a12bae26519d3b7767a4cf5599f","sha256":"c90c9e584e60fab1ef512783d7a883129e3e4b2c5b9197674f99b6e0147e463a","sha512":"b6c6e4702c4ae013d214248da77d3891038a66a09ddf771e805e19a9e8de2958775ddf2c056aaf5588f0b5483452efe1fe820c7de95907515859e807915c4fcc","ssdeep":"","tlshash":"40418a7a41ab40120017b53f5a9fa242357184ab4d0aba42bc5e4f84bfdc53e42f1ebe","size":2410,"data":"","first_seen":"2026-08-19T22:47:22.887443Z","last_seen":"2026-08-19T22:47:22.887443Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-19T22:47:22.88973Z","times_seen":1837,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"17adcbf7b7d9c909bfd1f732a95f8ba4","sha1":"72bdc2f6e1689859df4ef00d9af8b12e5a48db83","sha256":"19121d1dbd7971b969a689d52a99965d17cadc82e0df4b6b39c902deb47642d5","sha512":"0d0bb10a93466eb1ff7e438bee906049874bfa8c8a45a165e1b52eb3bcccdfcfc6c44da1795f85f210023ec1ccc1ad82e702b24be53d9fe5db4af6b367248939","ssdeep":"1536:5+8FucURqp/tYiYA5vPpXn4Gj4oRPIxWxe+ikIAcUwcDr:gIcq3Yit5vBXRRGQGk9cUwi","tlshash":"0a8360866af130345307b0b9884fd809b325991b2d8dbd947d8c92a1af5c53c9bf6fd8","size":82190,"data":"","first_seen":"2026-08-19T22:47:22.863734Z","last_seen":"2026-08-19T22:47:22.863734Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-19T22:47:22.890714Z","times_seen":935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/plugin-BIBz0ozh.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"66e7450be655915437fbfc4db5441fc6","sha1":"6ffc4fc751b512812d808bb45fa80f474102b2a9","sha256":"5939bd923676fce11a3be0d8b439a3b018b46984bd51b6526a1b4b61998695e4","sha512":"64409e1e43314a52329c913dc1f8e95aef7230212fe4e38c45e0f4f99f1245d3b76c5c432739bc1ba24a4243309789b26d8ff9124077b5a92f4d0954d3939e92","ssdeep":"12288:62Wc0SipL98f+N9u6QTZWJSszx9UCi6VmKl39MDfq47AHX2chLrsjMsn60:sHX2G3sj5nf","tlshash":"7235c4aa65f124328363b0360d6f904427354a6f9d6c7ea43e9c56204f8d53ca7f2bed","size":1083733,"data":"","first_seen":"2026-08-19T22:47:22.893236Z","last_seen":"2026-08-19T22:47:22.893236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"13cef6e27ffe8d8b37e8815c02029f2a","sha1":"88e59413032d7a813b32270a2fb7fc01bddf9782","sha256":"4211f668d11528acc38eef50b42b2e6424cda9c16410876e47b650e314cfe632","sha512":"b639616d93801abb5c05193acbfa4668d5751300a3dd6e168544ed0943e912dac61406f4b1cde4d42ea092657c4172b38e713416508b9ded4d59aadcda437c82","ssdeep":"1536:irCU7k6iej/Cqjetpa/Q2Gv01X2DhQWyAvwG:i2ok6iej/9jetpa/i092D+WPv9","tlshash":"16832f466bf92024a35770798c9f90097b3a841f0e46ad487e4c93f04f6c57c9bb9fa9","size":81369,"data":"","first_seen":"2026-08-19T22:47:22.845439Z","last_seen":"2026-08-19T22:47:22.845439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"importedModule","is_inline":false,"md5":"d6f5d4ad8113cc53ccfccddcc2ee3b0e","sha1":"efafe9f488fb1a8203766c5b3118e9712d0c754c","sha256":"36a23fa94d93e6c6b2d96de72b2ba42d4f23cec085ebe231c3cf5896d4479528","sha512":"653c2f3a551f4737764d960de0b65266319fa596f1d4c6260702411559980b999bb324aacd56be4a8cf1ded80a2b1b027ac39f722d48ba16154a921e9b64ed69","ssdeep":"1536:WPMzlypzBdLyi0KlUF8KIZacQbg1DQArahQo0v4fGvmfAmg7qRCmFhPd2rRwh5ni:FzlyJyiXx0cQb+BqRCU0wPzBdOwk","tlshash":"17144e456be570319307f0794d5f8c09ba28a82f198dbd86798cd2b05f9943c87b9ee8","size":193616,"data":"","first_seen":"2026-08-19T22:47:22.851919Z","last_seen":"2026-08-19T22:47:22.851919Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-19T22:47:22.895258Z","times_seen":2187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-08-19T23:17:48.355218Z","times_seen":2857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/index-0-m-FWxW.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a17333b92aa34d5a68ea250c521f7e5","sha1":"d5545dd872de7451aff9c44dd30b45b4321268a1","sha256":"31330791c9200a038c04f412473fc39cd6dd4a57f4d7e7cbd59987ff69d57a06","sha512":"9c6be293f569ad55b01a4dce5771d0d99ce68657a4264812be747419378b82f1495dfbd1c009a56f8f9cd9b2c7ba4edce97840e7bb68fb5b38134f9e33b18756","ssdeep":"24576:j1vo4zeo8sHyH7n02jmNBQp9D0I5/54lgxEpSoFX/B1PND:hvo4io8sHyH7n026NBQYoEPr","tlshash":"e0556c0a70874979c1e507d170dd3942616c0fae99a4c4c642fcae1933f2eaee56fb78","size":1382783,"data":"","first_seen":"2026-08-19T22:47:22.896495Z","last_seen":"2026-08-19T22:47:22.896495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-19T22:49:57.246605Z","times_seen":7296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd8830d17c52e90e2462543fcf95450b","sha1":"13c55b8499e46aac3465f4a4d06c5dda93288b89","sha256":"3551ad801c36236eae3d22b236b9ddc43b95f105111dd511934c24bacbaed54a","sha512":"115f572a004d550c1161a8859621e9d3c1ef0248d0f723b9a5afc0c8a071adf885745f79b5bfff0c0e5c7dca6cf98271ff39e6efc74142ab2114628a95a56383","ssdeep":"384:oE/uRBEHEaE2WL9eneQO6EQZaPkXWb6tUUcBSBhGnoUTimFecJpmXBB003NwX0bJ:1/uRaQ6E/8O2/n8lJ813yaDzr5/","tlshash":"a723ba4a6ae42070a287f47e1e6f8c067aa4545f0e1cfe0a7d5c92b49f1d43c53b5fa8","size":46269,"data":"","first_seen":"2026-08-19T22:47:22.834606Z","last_seen":"2026-08-19T22:47:22.834606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/verdor-B21Y3k7c.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30f0705bdb81fe2cc124828bf5ab757","sha1":"65ec8997544e438fbe675b6dbf373c264049cbfb","sha256":"0ec59773ece2cc68541e7c8220d153d290c8ac5599335a9cc59acf950e924055","sha512":"a66ddac3ed677b25a37514d2a57e34a3f72f3232f767d8cbe836511035c7292689d8bdb01806fa3bbc9f3cf1b696b799974d66b7c0ebd51e2bd50559c252fc27","ssdeep":"49152:2Dpfp/FY8+9PvNZNqPVP3q4/t5u1GpiRCPvTz9/xx+IJTQDQQzVNI+9iiM1bFcj3:2lUfoPkQ/5JjuBuKcWDIuP","tlshash":"a1566cd87295707643c755f0507f080fb23aa85925288098f66ddae92fbc84b667bf3c","size":5978331,"data":"","first_seen":"2026-08-19T22:47:22.902985Z","last_seen":"2026-08-19T22:47:22.902985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"52a2a0f85824f3f375739f997974711a","sha1":"4aa64cdb407b27f92a23ec594a9afe3c9536ecff","sha256":"24a6cdcf52549794abb8a07a91be42a7fda613d689f3eca2c3837eab93070249","sha512":"775109a11cfa8ebe4eefb0aba7f34a68f7e1190659151c7bc543870717436627fe57215262da6cf332662b901a60ddf5a7d551d2d82f986f60eec71016ccd12d","ssdeep":"1536:OOaaicdW5P+y+Z6EmavLxsz7Psfb7aFbymEuj8ry/xcVhEzY1qAsj:OL0W5Pnr0mEugrmqAY1Ij","tlshash":"b3c3525532f435385307f0b6080bcc1ab329a89f299abd967a4c52a42f4953cc7f6fd9","size":125286,"data":"","first_seen":"2026-08-19T22:47:22.831634Z","last_seen":"2026-08-19T22:47:22.831634Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/#/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"Function","is_inline":false,"md5":"9ffe08c617f1645e75680a97d6c62146","sha1":"38d36265763c266e2dc1c0c1b400201f7116aa10","sha256":"9d2ade96c7524a754bd81dfc62de9c10e60a337a052e7e8ae8443ad210e9b22f","sha512":"2c2a9bf4e305b53b0b4e67c68fcc5d862b416111809b89503dbdb15983912f7afb8d56b786e8a9c7c00d324e533a3102974ca9efc728cb51fe0a2fa1a3d9e50c","ssdeep":"","tlshash":"9cc08cc4a0ca6d00aa12641020af24e49034402670482b538da8d8492ea20b48233ee8","size":145,"data":"","first_seen":"2026-08-19T22:47:22.905455Z","last_seen":"2026-08-19T22:47:22.905455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/install.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9828d547d173655e9b738ae8735e0e05","sha1":"eda255844eed6252e171887a2ca4c6a52477c555","sha256":"d20d5a46bcb75b6b5bb4e4eca60fb07ffd4effa9d18538f57b20c8ddb97bf449","sha512":"19e8bdd97db27081cb51a46ac32471caf6f2f39f52515397175d96c63ed44cd960e90e4af2523094934aa1ee78bc26333137a107380321fcbbf67ee9374046e6","ssdeep":"384:kCjrv6tmsEg1xdJzePf/ysezYqpQlM5xIEdKl:kCjrBsuqYqt5hdA","tlshash":"3162622321f211388b17703a181fd1153a16946b2e86bc613fcc8a649fdd67d86f2fe6","size":15432,"data":"","first_seen":"2026-08-19T22:47:22.8701Z","last_seen":"2026-08-19T22:47:22.8701Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"pdfh5.js v2.0.5 \u0026\u0026 pdf.js v2.11.338 https://pdfh5.gjtool.cn","filename":"https://otcdd.com/assets/verdor-B21Y3k7c.js","line_number":8500,"column_number":11268},{"level":"log","text":"pdfh5.js v2.0.5 \u0026\u0026 pdf.js v2.11.338 https://pdfh5.gjtool.cn","filename":"https://otcdd.com/assets/verdor-B21Y3k7c.js","line_number":8500,"column_number":11268},{"level":"log","text":"websocket open success!","filename":"https://otcdd.com/assets/index-0-m-FWxW.js","line_number":1,"column_number":81263},{"level":"log","text":"未检测到 Web3 钱包环境","filename":"https://otcdd.com/assets/index-0-m-FWxW.js","line_number":266,"column_number":25068},{"level":"log","text":"websocket open success!","filename":"https://otcdd.com/assets/index-0-m-FWxW.js","line_number":1,"column_number":81263}]},"http":[{"url":{"schema":"https","addr":"otcdd.com/assets/index-0-m-FWxW.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:01.817Z","timestamp":1787179561817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/index-0-m-FWxW.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:42:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd22b-15197f\"\r\nexpires: Thu, 20 Aug 2026 10:46:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":1382783,"size_decoded":530567,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0af5fcce74f9158a2a15698983e1dc8e","sha1":"a13e45aa3aabebe703ad89e560fba53e07e20f9b","sha256":"04e5b73cbb81094590ee04c4e393adf6c1fe46df8adc2a0f61a14f6348bfb6b4","sha512":"ceb2dc23473e823d0ec8879c016a39c260f95aa4dd8425202b375011b37407b27920d8cef716823673ddde905a96a00e0707db3993e9ef1da87a06bd118f45de","ssdeep":"24576:j1vo4zeo8sHyH7n02jmNBQp9D0I5/54lgxEpSoFX/+:hvo4io8sHyH7n026NBQYoEc","tlshash":"65355c0a70834a79c1e507d130dd3942616c0fae99a4c4c642f8ae1933f6eaef56fb74","first_seen":"2026-08-19T22:47:22.791462Z","last_seen":"2026-08-19T22:47:22.791462Z","times_seen":1,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/favicon.ico","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.034Z","timestamp":1787179565034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 16499\r\nlast-modified: Sat, 15 Aug 2026 02:45:07 GMT\r\netag: \"6a7fd2b3-4073\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16499,"size_decoded":16773,"mime_type":"image/x-icon","magic":"PNG image data, 2311 x 2311, 4-bit colormap, non-interlaced","md5":"b6123e47147ea66a6984f248eda36c5c","sha1":"55b3f3a8f312c9022ceb4df779b2e25f30681696","sha256":"19432322e1636e7c92e6ea83b1ca1696f20c53aa61427f1394d1f34577c7d92d","sha512":"98a3d185ac86c21e14a86b1a8f69a5897ba1f19161503f0723f3ad7c9fdb818b7e6152b4cda76da63a98f4bbe0796de1cddc5e4461fdd4961c3d59a08e2cdc25","ssdeep":"384:FxMv4SXa4rNR/QiZf5z+1+RSwQStsRtx7U0:7D94rfzM6QSsxB","tlshash":"ed72aece251d11a6904e4f05ce4c8011b91b91973b23ff58e6d4c4a3c32b92d55eabec","first_seen":"2026-08-19T22:47:22.793976Z","last_seen":"2026-08-19T22:47:22.793976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/market/secondList","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.303Z","timestamp":1787179565303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/market/secondList HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:05Z","raw_expires":"Wed, 19-Aug-2026 23:10:05 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7241,"size_decoded":1293,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81bc459e4c9e9a169f292caa83f28a50","sha1":"87c4d686bfeaa3b74adcbca1fb7fa3de94e77f05","sha256":"d6e3f53c0ddb138801c235f1485e4063aef2740ce421d66c4c4652cc855c3cc5","sha512":"b65d184368446462c123a3bff4f4ab2662efb3d827ddb5fc7c5a55005facd689295e9a50447099d6fa6379026ae2ee8f4540e406a70cdc5fe0bb2628bbedf8f7","ssdeep":"192:Jmm1Bux0bCShEa/oXi87ip3AqIx3/vhyPegS82/58ERo6:D3anhR","tlshash":"c4e1bf5a3291de6bc70195d018e33d85745e540fbe8aafe8e1cc8d6c85f44b4260f76b","first_seen":"2026-08-19T22:47:22.7961Z","last_seen":"2026-08-19T22:47:22.7961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/market/secondList","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.155Z","timestamp":1787179567155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/market/secondList HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:07Z","raw_expires":"Wed, 19-Aug-2026 23:10:07 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7241,"size_decoded":1293,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"81bc459e4c9e9a169f292caa83f28a50","sha1":"87c4d686bfeaa3b74adcbca1fb7fa3de94e77f05","sha256":"d6e3f53c0ddb138801c235f1485e4063aef2740ce421d66c4c4652cc855c3cc5","sha512":"b65d184368446462c123a3bff4f4ab2662efb3d827ddb5fc7c5a55005facd689295e9a50447099d6fa6379026ae2ee8f4540e406a70cdc5fe0bb2628bbedf8f7","ssdeep":"192:Jmm1Bux0bCShEa/oXi87ip3AqIx3/vhyPegS82/58ERo6:D3anhR","tlshash":"c4e1bf5a3291de6bc70195d018e33d85745e540fbe8aafe8e1cc8d6c85f44b4260f76b","first_seen":"2026-08-19T22:47:22.7961Z","last_seen":"2026-08-19T22:47:22.7961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/verdor-B21Y3k7c.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:01.819Z","timestamp":1787179561819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/verdor-B21Y3k7c.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd285-5b38db\"\r\nexpires: Thu, 20 Aug 2026 10:46:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5978331,"size_decoded":1680913,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35062)","md5":"3b9682db9d771f7a77c64bdc4dfc427b","sha1":"3d6915d6c471abbe4aa72c6065d1238da3c2389b","sha256":"add7fe15ef88377343757ffb7b966054e957cf1de5adf818c3bf46dea47a6459","sha512":"3fb975a763b5b41be619145e51add379150227046b17beff122bd2210e143771c0cbc17ef713429cd2e2d7990d1afeb17b304f8ec67741a8008ad1ef428ac9fc","ssdeep":"24576:N4DDpfp/FY8RY9PvNZNqPVP3q4/t5u1GpiRCPLQXPjBi:2Dpfp/FY8+9PvNZNqPVP3q4/t5u1GpiO","tlshash":"1f256cd8f269702243d756f1007f090fb33a599c22289198f699d9dd2dbd80766abf3c","first_seen":"2026-08-19T22:47:22.798149Z","last_seen":"2026-08-19T22:47:22.798149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:03.207Z","timestamp":1787179563207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Thu, 13 Aug 2026 03:46:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1016c4ec68508b07b5535ff8dc3bdcc4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: s-yCRGKN0tiFiYFfmNXwfJtUyBJg0ieVcHMG-jFQi2rY03SVwsrkow==\r\nage: 586802\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-19T23:17:48.247563Z","times_seen":3368,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":32,"connect":24,"send":0,"wait":11,"receive":13,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/getUrl","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.300Z","timestamp":1787179565300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/getUrl HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:05Z","raw_expires":"Wed, 19-Aug-2026 23:10:05 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":90,"size_decoded":462,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"97c6b172f7905aa2ee3a152bdcd8e7b9","sha1":"37eca29a8368989ff344ff90f960a6717f4a333f","sha256":"ad73b661b194808ca842a7f406cf7e9b8945e1f2298fc0d336e557abc4130a73","sha512":"bee6bf465db0917cff55a98643dee0f98df257dc4970ecced1c9ac918fb743985f6fd3a421fa7402546b62aaf44cc4730e1df57b3068d70bebb01b7dba768be3","ssdeep":"","tlshash":"d0b01204cc0c4492540a30c1005b551002d46db304408655c87c929cc81d0b13449868","first_seen":"2026-08-19T22:47:22.801062Z","last_seen":"2026-08-19T22:47:22.801062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/verdor-C-vx9QgR.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.524Z","timestamp":1787179565524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/verdor-C-vx9QgR.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd286-21051\"\r\nexpires: Thu, 20 Aug 2026 10:46:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135249,"size_decoded":48680,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"963df58e9b7ae0b439c93cbf1029bf1c","sha1":"64c269b14f70c3c32f310e814731de2a83e7395f","sha256":"07adef3494f7bb46e63897e687e3bc4471a3eb1fc3939d84802b82ee43bf5744","sha512":"419821210f8b29fc19db221f9c0c171373f931c63ed306886b19e5f88fce798daf65a28caee6eb353bb05d8f63fd464e88222e50a1829a526b64733d61e8d370","ssdeep":"1536:OIyNBi3MFYaQj7FCwsBlDOFIxuVoxdx47+1Ah5a4zjw/gq:SNIClDsIxuVSn4Zcoq","tlshash":"ebd3f7a5a6c4a1bc6f2bf2759b8766d8f23cf631cd01daa4f105511d0ec7bf50223a29","first_seen":"2026-08-19T22:47:22.80275Z","last_seen":"2026-08-19T22:47:22.80275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.566Z","timestamp":1787179567566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Thu, 13 Aug 2026 03:46:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1016c4ec68508b07b5535ff8dc3bdcc4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: TaVjSAZ-PSuZcrVcR8nU-o-YAinvpmlavu1PjdL8aJPJhy2qNo2yRA==\r\nage: 586806\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36489,"size_decoded":11882,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-08-19T23:17:48.355218Z","times_seen":2857,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/verdor-C-vx9QgR.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:01.820Z","timestamp":1787179561820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/verdor-C-vx9QgR.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:22 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd286-21051\"\r\nexpires: Thu, 20 Aug 2026 10:46:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":135249,"size_decoded":48680,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"963df58e9b7ae0b439c93cbf1029bf1c","sha1":"64c269b14f70c3c32f310e814731de2a83e7395f","sha256":"07adef3494f7bb46e63897e687e3bc4471a3eb1fc3939d84802b82ee43bf5744","sha512":"419821210f8b29fc19db221f9c0c171373f931c63ed306886b19e5f88fce798daf65a28caee6eb353bb05d8f63fd464e88222e50a1829a526b64733d61e8d370","ssdeep":"1536:OIyNBi3MFYaQj7FCwsBlDOFIxuVoxdx47+1Ah5a4zjw/gq:SNIClDsIxuVSn4Zcoq","tlshash":"ebd3f7a5a6c4a1bc6f2bf2759b8766d8f23cf631cd01daa4f105511d0ec7bf50223a29","first_seen":"2026-08-19T22:47:22.80275Z","last_seen":"2026-08-19T22:47:22.80275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":647,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/css/ssc-iconfont-D73ap3ms.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:03.210Z","timestamp":1787179563210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-D73ap3ms.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29d-22f9f\"\r\nexpires: Thu, 20 Aug 2026 10:46:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143263,"size_decoded":64376,"mime_type":"text/css","magic":"ASCII text, with very long lines (22522)","md5":"b9a95528b72bb47be55499d9bf11dab3","sha1":"4e182a0b5e123e2e27f5dd8ff89bcebf27ff0ca3","sha256":"d512f13c2ed37093586cd227a464940001dd927a7e303d616f8b2cef22a74b68","sha512":"3e4a3813c90888d9b8b6972984ec520772f1d83fe5c4e7dc76e599a02674c8d26b4dece7848c1e84018f5f4b25afa732f380d9ec2129cce8cc77bfa56865b0ba","ssdeep":"1536:aNXP/bus4hTqbIly5RHVcn8n3zTcUB4trFpFWGFeFjF4FFcpWtE+uV+F8oe5In6r:YXmTKx5RHjj4UB4tu+M","tlshash":"a3e319bcda60299dfd39c94723117228dc3620effff94d48aaa632495be548cc5d096c","first_seen":"2026-08-19T22:47:22.805686Z","last_seen":"2026-08-19T22:47:22.805686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:46:00.683Z","timestamp":1787179560683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 15 Aug 2026 02:45:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2b3-2aa5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10917,"size_decoded":3526,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (331)","md5":"6c3479763e4183de669848740840b1f3","sha1":"721471899be058962118f7c97b7ac8addd6f776f","sha256":"030d3514f3bd5a8fb3064013e4aae6360ae43846406778399ecc757d3640d25f","sha512":"26efa34f81f99b304fcec36973283ffb0f407a7737441fce0e53ca7f2453e26a58f267729e630d5753246d649507f8f1cdb5b06b4ac48d1c792c69645ecd18e7","ssdeep":"192:+7fwa7t6bznYoajsa5gNmVwW+i4S0mLAcc/RIv/0tc/RaMbnQrafSaJrD/PzryF4:cQyrLkf0Z","tlshash":"eb32957505b3901b1513b12a1fee670a3671e00b8d1aec6e3fcd83548fc5ad989f27a8","first_seen":"2026-08-19T22:47:22.807526Z","last_seen":"2026-08-19T22:47:22.807526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":0,"dns":99,"connect":216,"send":0,"wait":216,"receive":0,"ssl":435},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566201\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.209Z","timestamp":1787179566209,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566201\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://otcdd.com/\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a2dcb140eed1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":558,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":6,"connect":10,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/icon_appStore-b8n-RAFa.png","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.164Z","timestamp":1787179567164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/icon_appStore-b8n-RAFa.png HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Aug 2026 02:42:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd21b-36b6\"\r\nexpires: Fri, 18 Sep 2026 22:46:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14006,"size_decoded":14023,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"89f0eb0533a76fcf8a2714e6945cb344","sha1":"faf2cd0dc10a9f06388f51998f399732e901f61b","sha256":"8dc4749e2ea6917da79d553571aadc8ab4dff908a1b48bb2582be80247aa2213","sha512":"c01e2980fafe9dfa311c7b9f1eeeca0ca6c088b403e64a77c9dd52d055d9917e36d59637031b361e600f390cf5bc8619a74c1f1dfa0ac8e03903e6431a23fba5","ssdeep":"384:8JnCVmzZDKfQ56yFVHuhMrBRPWt+4NNaNarrGlHXvUJycNELDC4xM:8FCVmz9KI56yzo4Pydywriuyc+LDpxM","tlshash":"5e52c066f705b28253384d7086a7c32cbc3ec2548a11b9f998df90d52f6172e7ac586d","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-08-19T22:47:22.809982Z","times_seen":330,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.039Z","timestamp":1787179568039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://otcdd.com/\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a2dcb14c3bb0b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":558,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/stats","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.306Z","timestamp":1787179565306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/stats HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":308,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"5e031f8627ed970b3c8ed316e8cdb7bb","sha1":"29372de525a544957c9eaaa5db7cfe6147653a3e","sha256":"0e14b8d3b4b8da69792010fb6cb2f18e9d8c9d3e1245d8060db1ab832810aa45","sha512":"82250acdad1b88043676ea2d5025ef4ec8a670a172b61970f2fbbb80942363aa2a353fb60956a3b848951d9fe4e872de4cfb7a6da2e45c499a068f4bee53aa97","ssdeep":"","tlshash":"1a90029504b109110c80b616a8855265e05122a690da6e9187c6a331bd44a35a5660b5","first_seen":"2026-06-19T08:17:08.350809Z","last_seen":"2026-08-19T22:47:22.8107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.328Z","timestamp":1787179565328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ndate: Thu, 13 Aug 2026 03:46:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1016c4ec68508b07b5535ff8dc3bdcc4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: NuLPu5m1FDttEoXW5SyreIYgT2q7dkUDkHGC6Z50ABbGENd5eGLyLg==\r\nage: 586804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":11882,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-08-19T23:17:48.355218Z","times_seen":2857,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"65.9.46.16","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.232Z","timestamp":1787179566232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Thu, 13 Aug 2026 03:46:02 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 1016c4ec68508b07b5535ff8dc3bdcc4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: H1VY_uuDjSL8dAGRA55lmo4SK_saj-ndNNxyECHNjYZ-R0ElV0MwmQ==\r\nage: 586805\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47223,"size_decoded":47882,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-19T23:17:48.247563Z","times_seen":3368,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=085f7fb6a65c5516cb73adb3913e8f22\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566251\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.279Z","timestamp":1787179566279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=085f7fb6a65c5516cb73adb3913e8f22\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566251\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 975\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":975,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHGlNY5s2IWyh8htTV8rCyiyQtVtuz%2BP3jb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQohBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAl%2FluFjI5fmlAs5M2ojIelayh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWPScAr3o%2Fs9zwBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHaf9XqN9VvyAKhIeD5l5OmMeu%2BI2tvrAf9I2f8M2oSrefqM2u%2Bl9y9l3lhBdHpP9tbr3u4sCyi0qHVfGHWfhyiyvmWtOrWtnmvcNHqPSyiyOVOovc%2Bt3uhsNIVBGcqsnm5snI41nz%2FMh6Gf9uprNIwsNH4PTVbfuzGlNY5s2IWN9jEfScbMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQoGy3V5y3mWtdY%2By3w%2FPSt%2Fy3zh1QXAtdY5t3zqrCY%2FsnaVyh8hfScWfQXMsnaVyAKhf9uprNIwsNH4PTVbfuzGlNY5s2IWN9jEfScbMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQohBdHvsVrVfGIEP9khMAOpyQV5cOHeP9m%2FrnI4yAKhldHzBdH5r3wbfQX%2Fr3XqN9aWr3DhMhH513uvPSfhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb1413b0a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":605,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-19T23:17:48.298403Z","times_seen":2739,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=bf9530a6a13b22db69a0382046e23e59\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566702\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.706Z","timestamp":1787179566706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=bf9530a6a13b22db69a0382046e23e59\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566702\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 455\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":455,"data":"data=0qHafQ8hMhHKtTc8f5KWB9z4s9cvBQIWPCFABqypyQcWPnuEPhyiyQz4s9cvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdHA13u4NSX5rNHb1nohMhy4I2l5l2vklnOaI9cQI5saI56mIetvI5ymlnO5sAs8sqypyGYptntEPVzErdyiyQfjfTI%2Bl9FhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQohBdHa1nohMhyhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\nset-cookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0; expires=Thu, 19-Aug-2027 22:46:06 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb143ef913181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"ss_uid","value":"b0fec0bbcf774e41194ff0dac9d4bda0","quoted":false,"path":"/","domain":"salesmartly.com","expires":"2027-08-19T22:46:06Z","raw_expires":"Thu, 19-Aug-2027 22:46:06 GMT","max_age":31535999,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0; expires=Thu, 19-Aug-2027 22:46:06 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":808,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"886501e521211e70caf6c09a223970b9","sha1":"a881b5c0ef437e00935adeb59cfa2e75475dbc8e","sha256":"96a61fe7fc989ee8a97dc536059f324b177e5a3f3da80590621a7f791fa300de","sha512":"29121da7999881e8244d882cfda3e6b44868266e608cbe8ffcb95b2e45f09ff54503baa0ff1e9261de8a0b0b06f1f1bb694499fdc8b6804e92ed97d016985bcf","ssdeep":"","tlshash":"90b01211165c16030e41514e620d270150a000504e208bd5846c4304070c0e97007051","first_seen":"2026-08-19T22:47:22.813213Z","last_seen":"2026-08-19T22:47:22.813213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/stats","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.158Z","timestamp":1787179567158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/stats HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":308,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"5e031f8627ed970b3c8ed316e8cdb7bb","sha1":"29372de525a544957c9eaaa5db7cfe6147653a3e","sha256":"0e14b8d3b4b8da69792010fb6cb2f18e9d8c9d3e1245d8060db1ab832810aa45","sha512":"82250acdad1b88043676ea2d5025ef4ec8a670a172b61970f2fbbb80942363aa2a353fb60956a3b848951d9fe4e872de4cfb7a6da2e45c499a068f4bee53aa97","ssdeep":"","tlshash":"1a90029504b109110c80b616a8855265e05122a690da6e9187c6a331bd44a35a5660b5","first_seen":"2026-06-19T08:17:08.350809Z","last_seen":"2026-08-19T22:47:22.8107Z","times_seen":3,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=6e03b4ad2f49c793e5f2b299363ba039\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567600\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.605Z","timestamp":1787179567605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=6e03b4ad2f49c793e5f2b299363ba039\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567600\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 724\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":724,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlNY5s2IWyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyms2l8s2Vhs9O8I9HAI3uQsQo5rQO8M2l9M3XVI5rhrdypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Flqk8N5OSI5vqIAlmIeO4l5DhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzWt3IvrdmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8yTc%2BsvVvBSc%2BsVFjI5RSl2fmI2sal5yaNSY5lQRj1evhBdHaf9XqN9VvyAKhIeD5l5OmMeu%2BI2tvrAf9I2f8M2oSrefqM2u%2Bl9y9l3lhBdHaf9Xbt3VwrCyil2lSMd8hP3zGN9c%2Bt3OhMGphsGHWtSIVfVz5tNY8PSH4yAEgyQIWP9wErNlhMAOpyQjWs9upDScWfQuGrCyilN4pyQIafGHVPGc2sSHEfTohMhyhbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb1498a823181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":605,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-19T23:17:48.298403Z","times_seen":2739,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=ec58a843d1449c6e8f1a0a9dcb098175\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567665\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.670Z","timestamp":1787179567670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=ec58a843d1449c6e8f1a0a9dcb098175\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567665\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1007\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1007,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHGlNY5s2IWyh8htTV8rCyiyQtVtuz%2BP3jb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQohBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCk8BAl%2FluFjI5fmlAs5M2ojIelayh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFWPScAr3o%2Fs9zwBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2FldY4snHHrdz4snHbl2fkI5OSM2D9I2lqIXz8f5HKlnRmyh8htNIVfVzErdyiyAoal5ljM2Rjs2DSr3sSIADSlev4I9oSlAvjs2IhIAYAyh8hP3zGN9c%2Bt3OhMGphrNHqPSyhMhHMPSc3PSX%2FrOXqfQzqMhYHcOHOsNc%2BsQu5rCm4fQu%2Ff9uAt3VWPAKRHSI%2BP3X5Pnuqt3jmNSYbr5u8f9O5Pazp1NI4N5V%2Bl5Y%2BMnHAs26SsQl4snrhreIQs26ml5skrnDSIQHvHqYEfqY%2FPSoRsCYZPQzSPhYWsQEVsSoRfScWfQDRPQuwrCypyGI4PSHV2QuwrCyiyGI%2BP3X5Pnuqt3jmNSYbr5u8f9O5Pazp1NI4N5V%2Bl5Y%2BMnHAs26SsQl4snrhreIQs26ml5skrnDSIQHvyh8hr3HnrNH51nz%2FyAKjBdHEf4cdo9z%2FPQXAtdyiyA6hbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb149fb283181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":605,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-19T23:17:48.298403Z","times_seen":2739,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/index-0-m-FWxW.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.521Z","timestamp":1787179565521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/index-0-m-FWxW.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:42:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd22b-15197f\"\r\nexpires: Thu, 20 Aug 2026 10:46:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1382783,"size_decoded":530567,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bbef0b53661bfdabf46c671aa0b74bf0","sha1":"ba9369ec463068cdcdf253bea820c2cf45aee143","sha256":"514624552e544f56b2339940905aa1a5161862a82a240d259532118715f409b2","sha512":"6ca979d150037f0329789307e27de8c9199c89b1cdb925b9e435bfe53f39064f9441276edc29fe9a8f8064d9b990d2aaddbc20e804f4a5dd3ce89643c39de14d","ssdeep":"24576:j1vo4zeo8sHyH7n02jmNBQp9D0I5/54lgxEpSoFX/y:hvo4io8sHyH7n026NBQYoEI","tlshash":"e6355c0a71834a79c1e507d130dd3942616c0fae99a4c4c642f8ae1933f6eaef56fb74","first_seen":"2026-08-19T22:47:22.814857Z","last_seen":"2026-08-19T22:47:22.814857Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/index-YS4T_XPh.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.526Z","timestamp":1787179565526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/index-YS4T_XPh.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:42:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd22e-325e7\"\r\nexpires: Thu, 20 Aug 2026 10:46:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206311,"size_decoded":57992,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64712), with no line terminators","md5":"83a4193b05deee425953d50c84df1dfb","sha1":"f0f0bf34306c463f383c641522de1ccef396ec57","sha256":"d8ccd7c0d7651d4f85dd62fc525ac3c37626befbf41e0490b2577d80f7ddb5cb","sha512":"2a640890d992c58539035fda44eddef3d61f71b7068bd32e9857bc7ac162a29e768e044b1006b848697f1fef60dc57051f915fea43f5b61f1930bd3e45a20f3b","ssdeep":"6144:MGrr7fnFZgyiHTmU0b55jcpHYA6RE60RthQGp/:MGr3n/9iHGK","tlshash":"6214c6b4b14d11b8b77be115b39459cd324cf333c9560aaafa86b039cdc35f63661a88","first_seen":"2026-08-19T22:47:22.816121Z","last_seen":"2026-08-19T22:47:22.816121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":656,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.479Z","timestamp":1787179566479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a0-1e966\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125286,"size_decoded":39210,"mime_type":"application/javascript","magic":"C++ source, ASCII text","md5":"52a2a0f85824f3f375739f997974711a","sha1":"4aa64cdb407b27f92a23ec594a9afe3c9536ecff","sha256":"24a6cdcf52549794abb8a07a91be42a7fda613d689f3eca2c3837eab93070249","sha512":"775109a11cfa8ebe4eefb0aba7f34a68f7e1190659151c7bc543870717436627fe57215262da6cf332662b901a60ddf5a7d551d2d82f986f60eec71016ccd12d","ssdeep":"1536:OOaaicdW5P+y+Z6EmavLxsz7Psfb7aFbymEuj8ry/xcVhEzY1qAsj:OL0W5Pnr0mEugrmqAY1Ij","tlshash":"b3c3525532f435385307f0b6080bcc1ab329a89f299abd967a4c52a42f4953cc7f6fd9","first_seen":"2026-08-19T22:47:22.831634Z","last_seen":"2026-08-19T22:47:22.831634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.494Z","timestamp":1787179566494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a7-b4bd\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46269,"size_decoded":9441,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fd8830d17c52e90e2462543fcf95450b","sha1":"13c55b8499e46aac3465f4a4d06c5dda93288b89","sha256":"3551ad801c36236eae3d22b236b9ddc43b95f105111dd511934c24bacbaed54a","sha512":"115f572a004d550c1161a8859621e9d3c1ef0248d0f723b9a5afc0c8a071adf885745f79b5bfff0c0e5c7dca6cf98271ff39e6efc74142ab2114628a95a56383","ssdeep":"384:oE/uRBEHEaE2WL9eneQO6EQZaPkXWb6tUUcBSBhGnoUTimFecJpmXBB003NwX0bJ:1/uRaQ6E/8O2/n8lJ813yaDzr5/","tlshash":"a723ba4a6ae42070a287f47e1e6f8c067aa4545f0e1cfe0a7d5c92b49f1d43c53b5fa8","first_seen":"2026-08-19T22:47:22.834606Z","last_seen":"2026-08-19T22:47:22.834606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=2c541d93e60d42482d46d4b955575ec0\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568510\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.514Z","timestamp":1787179568514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=2c541d93e60d42482d46d4b955575ec0\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568510\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 493\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":493,"data":"data=0qHafQ8hMhHKtTc8f5KWB9z4s9cvBQIWPCFABqypyQcWPnuEPhyiyQz4s9cvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdHA13u4NSX5rNHb1nohMhy4I2l5l2vklnOaI9cQI5saI56mIetvI5ymlnO5sAs8sqypyGYptntEPVzErdyiyQfjfTI%2Bl9FhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhMnO5l3OmsQI%2Bleths5c%2BrQHvl9r%2Blev5IA%2BVr2f9sQohBdHa1nohMhHhl3rVs5YhsQIQI5f4r2ojl2v4rQs8r3uAMno4sQc%2BldHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb14f3c2e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":633,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"886501e521211e70caf6c09a223970b9","sha1":"a881b5c0ef437e00935adeb59cfa2e75475dbc8e","sha256":"96a61fe7fc989ee8a97dc536059f324b177e5a3f3da80590621a7f791fa300de","sha512":"29121da7999881e8244d882cfda3e6b44868266e608cbe8ffcb95b2e45f09ff54503baa0ff1e9261de8a0b0b06f1f1bb694499fdc8b6804e92ed97d016985bcf","ssdeep":"","tlshash":"90b01211165c16030e41514e620d270150a000504e208bd5846c4304070c0e97007051","first_seen":"2026-08-19T22:47:22.813213Z","last_seen":"2026-08-19T22:47:22.813213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/plugin-BIBz0ozh.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.502Z","timestamp":1787179564502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-BIBz0ozh.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:45:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2b2-108955\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1083733,"size_decoded":226785,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (334)","md5":"960f93cf6f41905bfcbe6b4dfe580613","sha1":"98942031f6f17f9e27374b3d77dfbcb20a8efe99","sha256":"3d9f03c1e65f7675ddb016625a9a1ca11fd265cb67bf99a5270a0222e557b1fe","sha512":"9caedf149d14e8f3cf485e217bf2bb1821c2e30a8bba89b22195470c3912d98caf6be270f6f108c07caa2599ffa2468926051c2cb1932f1d741ba9f700860ec5","ssdeep":"12288:62Wc0SipL98f+N9u6QTZWJSszx9UCi6VmKl39MDfq47AHX2chLrsjMsn6C:sHX2G3sj5nr","tlshash":"0425c4aa65f124329363b0360d6f900427354a5f9d6c7ea43e9c56204f8d93ca7f2bed","first_seen":"2026-08-19T22:47:22.838768Z","last_seen":"2026-08-19T22:47:22.838768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=5edb0b2868bdceab3e25e768efc328a7\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565885\u0026_lt=\u0026_u=\u0026_xma_=718695","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.889Z","timestamp":1787179565889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Jul 2026 12:16:06 GMT","end":"Mon, 19 Oct 2026 13:16:04 GMT"},"fingerprint":{"sha1":"1B:33:CD:24:37:4F:CE:80:C5:C2:0C:BB:6F:12:74:63:10:84:B6:03","sha256":"E8:10:3F:17:1D:16:1F:70:2B:73:15:DB:1D:5A:64:0F:66:B3:21:D5:F5:60:F2:71:3F:C0:C0:F1:D3:25:33:4D"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=5edb0b2868bdceab3e25e768efc328a7\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565885\u0026_lt=\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 343\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":343,"data":"source_url=https%3A%2F%2Fotcdd.com%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=4ba89d8be1f153bcd16bf81fcbfafe48\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext="}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: a2dcb13eeeb93181-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 77205ab7-fbc4-4b3d-ad5f-6c8c78d21b51\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":797,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9e6b77809de7d9eef9ce3659fec64546","sha1":"81d6fda62f44998fab7dea2df1b08a5053fb5a3f","sha256":"d04e75e66ec00d36734dea69ba643f255f8aae39e51fcc25e166d57e796025a4","sha512":"b8eccf1d8bee0743c33d992bff191d24071c8b43caf7e948e98a09c1f555dc6b50543829a0691c0627c99f3ae03e3b9ee9299bcda6b940ef97cf83fcd12839fe","ssdeep":"","tlshash":"c4c08c93688d82aa09a245ca4504206793de14205f46a62a48fe00b4064c68ab2a3460","first_seen":"2026-08-19T22:47:22.842203Z","last_seen":"2026-08-19T22:47:22.842203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":9,"connect":9,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.496Z","timestamp":1787179566496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a9-13dd9\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81369,"size_decoded":19604,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"13cef6e27ffe8d8b37e8815c02029f2a","sha1":"88e59413032d7a813b32270a2fb7fc01bddf9782","sha256":"4211f668d11528acc38eef50b42b2e6424cda9c16410876e47b650e314cfe632","sha512":"b639616d93801abb5c05193acbfa4668d5751300a3dd6e168544ed0943e912dac61406f4b1cde4d42ea092657c4172b38e713416508b9ded4d59aadcda437c82","ssdeep":"1536:irCU7k6iej/Cqjetpa/Q2Gv01X2DhQWyAvwG:i2ok6iej/9jetpa/i092D+WPv9","tlshash":"16832f466bf92024a35770798c9f90097b3a841f0e46ad487e4c93f04f6c57c9bb9fa9","first_seen":"2026-08-19T22:47:22.845439Z","last_seen":"2026-08-19T22:47:22.845439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/coinbase-2-bg-EG6WoUWV.png","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.166Z","timestamp":1787179567166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/coinbase-2-bg-EG6WoUWV.png HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/assets/index-YS4T_XPh.css\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Aug 2026 02:37:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd0e7-112fb\"\r\nexpires: Fri, 18 Sep 2026 22:46:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70395,"size_decoded":68612,"mime_type":"image/png","magic":"PNG image data, 375 x 812, 8-bit/color RGBA, non-interlaced","md5":"e66a3eed06a634c398a1bef360eddb3f","sha1":"285f42345f5c427b94d1b6d4ed0599115c931f55","sha256":"2b18ce6d59cfb98b29a650185afa26673367ed9ec7c52bbb700326c755d8d7e9","sha512":"2bccc2d42ca89d95fc5ed02b77cac28d7b966835107e691206d3009905fe88fd53c6c8e7f1753507169a84a71e1c9bc269b2f3141a5e068ca5b0a6f2b78c49a0","ssdeep":"1536:HQ2MG84bZl8+Lmb4pNvVEZCb+S9gOklb+pqTL:HfZ/ZlThjNSk9gOBy","tlshash":"3b63f12cacffe1e0d7d069a4c4ebe6161e48380d2964cf6c55b353a15e88cb119f61ee","first_seen":"2023-10-27T02:00:01Z","last_seen":"2026-08-19T22:47:22.848095Z","times_seen":43,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.724Z","timestamp":1787179566724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a4-2f450\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193616,"size_decoded":48632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d6f5d4ad8113cc53ccfccddcc2ee3b0e","sha1":"efafe9f488fb1a8203766c5b3118e9712d0c754c","sha256":"36a23fa94d93e6c6b2d96de72b2ba42d4f23cec085ebe231c3cf5896d4479528","sha512":"653c2f3a551f4737764d960de0b65266319fa596f1d4c6260702411559980b999bb324aacd56be4a8cf1ded80a2b1b027ac39f722d48ba16154a921e9b64ed69","ssdeep":"1536:WPMzlypzBdLyi0KlUF8KIZacQbg1DQArahQo0v4fGvmfAmg7qRCmFhPd2rRwh5ni:FzlyJyiXx0cQb+BqRCU0wPzBdOwk","tlshash":"17144e456be570319307f0794d5f8c09ba28a82f198dbd86798cd2b05f9943c87b9ee8","first_seen":"2026-08-19T22:47:22.851919Z","last_seen":"2026-08-19T22:47:22.851919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565319\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.333Z","timestamp":1787179565333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"OPTIONS /plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565319\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://otcdd.com/\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: 3787fb52-4262-4e58-977c-ad205b9dd4f9\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2dcb13b680b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":726,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":5,"connect":17,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.294Z","timestamp":1787179565294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: text/html\r\nlast-modified: Sat, 15 Aug 2026 02:45:07 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2b3-2aa5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10917,"size_decoded":3526,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (331)","md5":"6c3479763e4183de669848740840b1f3","sha1":"721471899be058962118f7c97b7ac8addd6f776f","sha256":"030d3514f3bd5a8fb3064013e4aae6360ae43846406778399ecc757d3640d25f","sha512":"26efa34f81f99b304fcec36973283ffb0f407a7737441fce0e53ca7f2453e26a58f267729e630d5753246d649507f8f1cdb5b06b4ac48d1c792c69645ecd18e7","ssdeep":"192:+7fwa7t6bznYoajsa5gNmVwW+i4S0mLAcc/RIv/0tc/RaMbnQrafSaJrD/PzryF4:cQyrLkf0Z","tlshash":"eb32957505b3901b1513b12a1fee670a3671e00b8d1aec6e3fcd83548fc5ad989f27a8","first_seen":"2026-08-19T22:47:22.807526Z","last_seen":"2026-08-19T22:47:22.807526Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1nvrtk/p1_v2/integration/plugin/image/20260521/1779328195815/logo.png","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.041Z","timestamp":1787179568041,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /prod/project/g1nvrtk/p1_v2/integration/plugin/image/20260521/1779328195815/logo.png HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 19 Aug 2026 22:46:08 GMT\r\nContent-Type: image/png\r\nContent-Length: 16499\r\nConnection: keep-alive\r\nx-oss-request-id: 6A863230CD397231721EB39F\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"B6123E47147EA66A6984F248EDA36C5C\"\r\nLast-Modified: Thu, 21 May 2026 01:50:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13330232024773970881\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: thI+RxR+pmpphPJI7aNsXA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16499,"size_decoded":17063,"mime_type":"image/png","magic":"PNG image data, 2311 x 2311, 4-bit colormap, non-interlaced","md5":"b6123e47147ea66a6984f248eda36c5c","sha1":"55b3f3a8f312c9022ceb4df779b2e25f30681696","sha256":"19432322e1636e7c92e6ea83b1ca1696f20c53aa61427f1394d1f34577c7d92d","sha512":"98a3d185ac86c21e14a86b1a8f69a5897ba1f19161503f0723f3ad7c9fdb818b7e6152b4cda76da63a98f4bbe0796de1cddc5e4461fdd4961c3d59a08e2cdc25","ssdeep":"384:FxMv4SXa4rNR/QiZf5z+1+RSwQStsRtx7U0:7D94rfzM6QSsxB","tlshash":"ed72aece251d11a6904e4f05ce4c8011b91b91973b23ff58e6d4c4a3c32b92d55eabec","first_seen":"2026-08-19T22:47:22.793976Z","last_seen":"2026-08-19T22:47:22.793976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/index-YS4T_XPh.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:01.821Z","timestamp":1787179561821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/index-YS4T_XPh.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:42:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd22e-325e7\"\r\nexpires: Thu, 20 Aug 2026 10:46:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206311,"size_decoded":57992,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64712), with no line terminators","md5":"83a4193b05deee425953d50c84df1dfb","sha1":"f0f0bf34306c463f383c641522de1ccef396ec57","sha256":"d8ccd7c0d7651d4f85dd62fc525ac3c37626befbf41e0490b2577d80f7ddb5cb","sha512":"2a640890d992c58539035fda44eddef3d61f71b7068bd32e9857bc7ac162a29e768e044b1006b848697f1fef60dc57051f915fea43f5b61f1930bd3e45a20f3b","ssdeep":"6144:MGrr7fnFZgyiHTmU0b55jcpHYA6RE60RthQGp/:MGr3n/9iHGK","tlshash":"6214c6b4b14d11b8b77be115b39459cd324cf333c9560aaafa86b039cdc35f63661a88","first_seen":"2026-08-19T22:47:22.816121Z","last_seen":"2026-08-19T22:47:22.816121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":646,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/css/plugin-X2350_1o.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:03.214Z","timestamp":1787179563214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-X2350_1o.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29c-54069\"\r\nexpires: Thu, 20 Aug 2026 10:46:03 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":344169,"size_decoded":94447,"mime_type":"text/css","magic":"ASCII text, with very long lines (22522)","md5":"90a48dfd03a349412719b3a600e2ae70","sha1":"3f0e2fa3f11273f515e0fc38fde55db212f72f1c","sha256":"f0735647535b6e76b0194bc040fa5660d1a4cafa70546bd2f27821f748f03467","sha512":"fcb4ef102b7c01cdfa36f9a24179d1abf515a63c41e02d5744c2d8951dd8e502015d36965432700c5ab3cd03c37e8f8c029fe6b3ddfaba37c15e75b6f9fe874a","ssdeep":"6144:qDj4UB4fc4QXzm5msGjwgAZSIsSY9BgWQmX+cmcmcD5IaINYtGQA3AdST4Poga4n:Sj4M4E4QXzm5msGjwgAZSIsSY9BgWQml","tlshash":"bf74daadafb11808bd2ad5542992f354e23d50d3ee5ecc38bae5300c8fc51c995b2f99","first_seen":"2026-08-19T22:47:22.854093Z","last_seen":"2026-08-19T22:47:22.854093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=eae3074f19ada8024c0ce74c230efbbd\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565324\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.332Z","timestamp":1787179565332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=eae3074f19ada8024c0ce74c230efbbd\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179565324\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 506\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":506,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlNY5s2IWyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Flqk8N5OSI5vqIAlmIeO4l5DhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzWt3IvrdmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyGcEPnX5t3uwfdyiyAOSMefjI5vaIAD5lAlhbC8hf9cZNSHVPQcVfVzwP9cVyAKhf9%2B%2Br3zSyG4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb13b68b93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":605,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-19T23:17:48.298403Z","times_seen":2739,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":9,"connect":11,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566200\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.207Z","timestamp":1787179566207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566200\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/json\r\ncf-ray: a2dcb140e97cdfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: bf1983ec-4fd6-4102-a821-2a212a87d35a\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":711,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-08-19T22:47:22.856302Z","times_seen":2284,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":-1,"dns":8,"connect":11,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/icon_googlePlay-CnVi1xKe.png","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.163Z","timestamp":1787179567163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/icon_googlePlay-CnVi1xKe.png HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Aug 2026 02:42:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd21b-4394\"\r\nexpires: Fri, 18 Sep 2026 22:46:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17300,"size_decoded":17346,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"c4282a5f16443fd4493ced29810ef78d","sha1":"350cb5059ba98aa2305ba0d959fec205c30d0f86","sha256":"7036016f1b71023def76c780104605b32a3f61bcf0bbc4e851b58ddef0582f01","sha512":"e28c604dd911462fbf0ac9af63308a814d7b91e6c08a6f87007543202c41659a2a22aec0506a1d6d8e2fdc0b761d661451d3852d2c0ffad1268435476bc4e849","ssdeep":"384:z2Kq8TbzyoamF27o1/nvB763ZjoDrI2Ppv4vvIARoWx/O1pd3Z:zgG+oamM01/yZSxPpv4vwARXx/+dJ","tlshash":"4a72cf1b7758a4d276234b742ce941224e478cf784e34a3ee7ba01a31f497d75e8a8c8","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-08-19T22:47:22.857273Z","times_seen":331,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.035Z","timestamp":1787179568035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 69286863bcbd902616c6cc4905c155f8\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-type: application/json\r\ncf-ray: a2dcb14c5c44dfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: b2d2c0f1-c690-4286-a8d9-aebfcaf1a2aa\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1375,"size_decoded":1323,"mime_type":"application/json","magic":"JSON text data","md5":"ed72441f5f9c656002b25eb802f9628a","sha1":"b428590881899d9b6607cee966e13d6d02ab2227","sha256":"abc92b6d08b1af4529bd4038255dfc3fea7b379674835ab9b09232e9f3f74ba5","sha512":"6ed78f59f120e2b726d555f6e23a4e228adea421d5c305b2cec7e683f493d2dc800792792619f0cef40c84eeacabaa2dc4a3a3a2b0c4556ac771b41698568a90","ssdeep":"","tlshash":"1a213124d108f86643e153c31af69d2383d8897ac2d6b0610cf8d82c478e0a3dea6d25","first_seen":"2026-08-19T22:47:22.85989Z","last_seen":"2026-08-19T22:47:22.85989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.006Z","timestamp":1787179564006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BO1BJI-2.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a0-1e966\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125286,"size_decoded":39210,"mime_type":"application/javascript","magic":"C++ source, ASCII text","md5":"52a2a0f85824f3f375739f997974711a","sha1":"4aa64cdb407b27f92a23ec594a9afe3c9536ecff","sha256":"24a6cdcf52549794abb8a07a91be42a7fda613d689f3eca2c3837eab93070249","sha512":"775109a11cfa8ebe4eefb0aba7f34a68f7e1190659151c7bc543870717436627fe57215262da6cf332662b901a60ddf5a7d551d2d82f986f60eec71016ccd12d","ssdeep":"1536:OOaaicdW5P+y+Z6EmavLxsz7Psfb7aFbymEuj8ry/xcVhEzY1qAsj:OL0W5Pnr0mEugrmqAY1Ij","tlshash":"b3c3525532f435385307f0b6080bcc1ab329a89f299abd967a4c52a42f4953cc7f6fd9","first_seen":"2026-08-19T22:47:22.831634Z","last_seen":"2026-08-19T22:47:22.831634Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/Rubik-Light-CTN6lZCq.ttf","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.275Z","timestamp":1787179566275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/Rubik-Light-CTN6lZCq.ttf HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/assets/index-YS4T_XPh.css\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 206696\r\nlast-modified: Sat, 15 Aug 2026 02:43:15 GMT\r\netag: \"6a7fd243-32768\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206696,"size_decoded":206984,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 26 names, Microsoft, language 0x409","md5":"23061741bd91192fd8f0fcc2ef2c1d15","sha1":"4e89f40b6b4938fd7e705960c74a0139ec12cae5","sha256":"8144e0b0963e8cb9fc40872e0154a6229e9baa75749e515aac0547fe630220fa","sha512":"80253f993077578df7291a44fff10c76eaca426675e955bc2e6684d23ec2db657a27b4043fa5bc1e69c99d1ff23a47473214cdfbe2221323798e6e8cc940a3e6","ssdeep":"3072:ZyAGO4Eubjd9F9f7G/flPxry6NbkjjTsZlhbN1E2/n9JRJ8icElctRUuSfmJcKV:ZyAG+ubjrG/flPrNn31EHtRUuSKV","tlshash":"2f144a27f383dd55c88a9fb84731c3609521bc21ab7b8a5f701a667efd5f8808d949c2","first_seen":"2025-09-04T04:16:24.10675Z","last_seen":"2026-08-19T22:47:22.861177Z","times_seen":96,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.008Z","timestamp":1787179564008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a6-1410e\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82190,"size_decoded":24954,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"17adcbf7b7d9c909bfd1f732a95f8ba4","sha1":"72bdc2f6e1689859df4ef00d9af8b12e5a48db83","sha256":"19121d1dbd7971b969a689d52a99965d17cadc82e0df4b6b39c902deb47642d5","sha512":"0d0bb10a93466eb1ff7e438bee906049874bfa8c8a45a165e1b52eb3bcccdfcfc6c44da1795f85f210023ec1ccc1ad82e702b24be53d9fe5db4af6b367248939","ssdeep":"1536:5+8FucURqp/tYiYA5vPpXn4Gj4oRPIxWxe+ikIAcUwcDr:gIcq3Yit5vBXRRGQGk9cUwi","tlshash":"0a8360866af130345307b0b9884fd809b325991b2d8dbd947d8c92a1af5c53c9bf6fd8","first_seen":"2026-08-19T22:47:22.863734Z","last_seen":"2026-08-19T22:47:22.863734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.245Z","timestamp":1787179564245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-BYcgX6J7.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a4-2f450\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193616,"size_decoded":48632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d6f5d4ad8113cc53ccfccddcc2ee3b0e","sha1":"efafe9f488fb1a8203766c5b3118e9712d0c754c","sha256":"36a23fa94d93e6c6b2d96de72b2ba42d4f23cec085ebe231c3cf5896d4479528","sha512":"653c2f3a551f4737764d960de0b65266319fa596f1d4c6260702411559980b999bb324aacd56be4a8cf1ded80a2b1b027ac39f722d48ba16154a921e9b64ed69","ssdeep":"1536:WPMzlypzBdLyi0KlUF8KIZacQbg1DQArahQo0v4fGvmfAmg7qRCmFhPd2rRwh5ni:FzlyJyiXx0cQb+BqRCU0wPzBdOwk","tlshash":"17144e456be570319307f0794d5f8c09ba28a82f198dbd86798cd2b05f9943c87b9ee8","first_seen":"2026-08-19T22:47:22.851919Z","last_seen":"2026-08-19T22:47:22.851919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/css/ssc-iconfont-D73ap3ms.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.227Z","timestamp":1787179566227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/ssc-iconfont-D73ap3ms.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29d-22f9f\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143263,"size_decoded":64376,"mime_type":"text/css","magic":"ASCII text, with very long lines (22522)","md5":"b9a95528b72bb47be55499d9bf11dab3","sha1":"4e182a0b5e123e2e27f5dd8ff89bcebf27ff0ca3","sha256":"d512f13c2ed37093586cd227a464940001dd927a7e303d616f8b2cef22a74b68","sha512":"3e4a3813c90888d9b8b6972984ec520772f1d83fe5c4e7dc76e599a02674c8d26b4dece7848c1e84018f5f4b25afa732f380d9ec2129cce8cc77bfa56865b0ba","ssdeep":"1536:aNXP/bus4hTqbIly5RHVcn8n3zTcUB4trFpFWGFeFjF4FFcpWtE+uV+F8oe5In6r:YXmTKx5RHjj4UB4tu+M","tlshash":"a3e319bcda60299dfd39c94723117228dc3620effff94d48aaa632495be548cc5d096c","first_seen":"2026-08-19T22:47:22.805686Z","last_seen":"2026-08-19T22:47:22.805686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567559\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.571Z","timestamp":1787179567571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"OPTIONS /plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567559\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://otcdd.com/\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: e7b7674a-a8b0-4a01-8620-c67aa46cff16\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2dcb1495ffc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":726,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026plugin_sign=a770ab745d748112d6fb8951cb45be3c\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.031Z","timestamp":1787179568031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026plugin_sign=a770ab745d748112d6fb8951cb45be3c\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568008\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=0"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-type: application/json\r\ncf-ray: a2dcb14c2beedfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: d0c65bf4-97ff-4bf5-a201-9ddbbc8c84c6\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":711,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-08-19T22:47:22.856302Z","times_seen":2284,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/Rubik-Light-CTN6lZCq.ttf","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:02.967Z","timestamp":1787179562967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/Rubik-Light-CTN6lZCq.ttf HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/assets/index-YS4T_XPh.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:03 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 206696\r\nlast-modified: Sat, 15 Aug 2026 02:43:15 GMT\r\netag: \"6a7fd243-32768\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206696,"size_decoded":206984,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 26 names, Microsoft, language 0x409","md5":"23061741bd91192fd8f0fcc2ef2c1d15","sha1":"4e89f40b6b4938fd7e705960c74a0139ec12cae5","sha256":"8144e0b0963e8cb9fc40872e0154a6229e9baa75749e515aac0547fe630220fa","sha512":"80253f993077578df7291a44fff10c76eaca426675e955bc2e6684d23ec2db657a27b4043fa5bc1e69c99d1ff23a47473214cdfbe2221323798e6e8cc940a3e6","ssdeep":"3072:ZyAGO4Eubjd9F9f7G/flPxry6NbkjjTsZlhbN1E2/n9JRJ8icElctRUuSfmJcKV:ZyAG+ubjrG/flPrNn31EHtRUuSKV","tlshash":"2f144a27f383dd55c88a9fb84731c3609521bc21ab7b8a5f701a667efd5f8808d949c2","first_seen":"2025-09-04T04:16:24.10675Z","last_seen":"2026-08-19T22:47:22.861177Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1008,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1007,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.009Z","timestamp":1787179564009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-P-0o5PGi.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a7-b4bd\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46269,"size_decoded":9441,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"fd8830d17c52e90e2462543fcf95450b","sha1":"13c55b8499e46aac3465f4a4d06c5dda93288b89","sha256":"3551ad801c36236eae3d22b236b9ddc43b95f105111dd511934c24bacbaed54a","sha512":"115f572a004d550c1161a8859621e9d3c1ef0248d0f723b9a5afc0c8a071adf885745f79b5bfff0c0e5c7dca6cf98271ff39e6efc74142ab2114628a95a56383","ssdeep":"384:oE/uRBEHEaE2WL9eneQO6EQZaPkXWb6tUUcBSBhGnoUTimFecJpmXBB003NwX0bJ:1/uRaQ6E/8O2/n8lJ813yaDzr5/","tlshash":"a723ba4a6ae42070a287f47e1e6f8c067aa4545f0e1cfe0a7d5c92b49f1d43c53b5fa8","first_seen":"2026-08-19T22:47:22.834606Z","last_seen":"2026-08-19T22:47:22.834606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/langs","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.927Z","timestamp":1787179564927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/langs HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:05Z","raw_expires":"Wed, 19-Aug-2026 23:10:05 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":649,"size_decoded":670,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4ac3e58fa9cb523209293770bc475067","sha1":"49db0172f2f06debe16a592bbe153dfeb62df038","sha256":"deacc80512cbd57493c5d23de1cbe9d62dbbcb0a1e1d88cb408b1b9d2ecd2ef5","sha512":"5d32c28606c7fc4ae47ea5058e461a86c78dad1eb6cb3f122eccb661738585b01a4f83c07f4aa5e22181070539674d67b0a8caed0fbab19cf642dc4c97de55a9","ssdeep":"","tlshash":"f2f06d5ab698adffa80859d3046be28db4d0328a0694af0015696e9c8658f952c2c9f6","first_seen":"2026-08-19T22:47:22.866981Z","last_seen":"2026-08-19T22:47:22.866981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/install.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.519Z","timestamp":1787179565519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29e-3c48\"\r\nexpires: Thu, 20 Aug 2026 10:46:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15432,"size_decoded":5097,"mime_type":"application/javascript","magic":"C++ source, ASCII text","md5":"9828d547d173655e9b738ae8735e0e05","sha1":"eda255844eed6252e171887a2ca4c6a52477c555","sha256":"d20d5a46bcb75b6b5bb4e4eca60fb07ffd4effa9d18538f57b20c8ddb97bf449","sha512":"19e8bdd97db27081cb51a46ac32471caf6f2f39f52515397175d96c63ed44cd960e90e4af2523094934aa1ee78bc26333137a107380321fcbbf67ee9374046e6","ssdeep":"384:kCjrv6tmsEg1xdJzePf/ysezYqpQlM5xIEdKl:kCjrBsuqYqt5hdA","tlshash":"3162622321f211388b17703a181fd1153a16946b2e86bc613fcc8a649fdd67d86f2fe6","first_seen":"2026-08-19T22:47:22.8701Z","last_seen":"2026-08-19T22:47:22.8701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/verdor-B21Y3k7c.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.522Z","timestamp":1787179565522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/verdor-B21Y3k7c.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd285-5b38db\"\r\nexpires: Thu, 20 Aug 2026 10:46:05 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5978331,"size_decoded":1680913,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35062)","md5":"3b9682db9d771f7a77c64bdc4dfc427b","sha1":"3d6915d6c471abbe4aa72c6065d1238da3c2389b","sha256":"add7fe15ef88377343757ffb7b966054e957cf1de5adf818c3bf46dea47a6459","sha512":"3fb975a763b5b41be619145e51add379150227046b17beff122bd2210e143771c0cbc17ef713429cd2e2d7990d1afeb17b304f8ec67741a8008ad1ef428ac9fc","ssdeep":"24576:N4DDpfp/FY8RY9PvNZNqPVP3q4/t5u1GpiRCPLQXPjBi:2Dpfp/FY8+9PvNZNqPVP3q4/t5u1GpiO","tlshash":"1f256cd8f269702243d756f1007f090fb33a599c22289198f699d9dd2dbd80766abf3c","first_seen":"2026-08-19T22:47:22.798149Z","last_seen":"2026-08-19T22:47:22.798149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.drdsy.com/ws","fqdn":"api.drdsy.com","domain":"drdsy.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.678Z","timestamp":1787179565678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drdsy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:19:05 GMT","end":"Tue, 25 Aug 2026 01:19:04 GMT"},"fingerprint":{"sha1":"43:78:BF:CA:A3:7C:8A:D5:DE:A1:3A:A6:F2:5E:CB:73:41:50:C4:5D","sha256":"6C:F6:FB:F2:7C:C1:C4:45:9C:C4:CC:AB:C1:6D:D2:8B:1F:DA:D5:70:1B:41:70:23:4F:14:51:D3:BD:64:40:F5"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.drdsy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://otcdd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: i8Rmfwm1kk971+P+SUbEBQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 19 Aug 2026 22:46:06 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: RKIOsFxlLqNrRheHO0Urv8P9cmE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":208,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":1960,"timings":{"blocked":0,"dns":656,"connect":868,"send":0,"wait":216,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/assets/coinbase_phone-CQQz3iMw.png","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.162Z","timestamp":1787179567162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /assets/coinbase_phone-CQQz3iMw.png HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 15 Aug 2026 02:37:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd0e7-b8a5\"\r\nexpires: Fri, 18 Sep 2026 22:46:07 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47269,"size_decoded":47649,"mime_type":"image/png","magic":"PNG image data, 552 x 676, 8-bit colormap, non-interlaced","md5":"3d6a5a62331fd9a5bde17154962dbf95","sha1":"e11b78ec810fbe5b3cc58f4da9213f64cf21f997","sha256":"cefdac212a239506f973f04ca925e2005b6bb43bbc2d7adae4d6a45fbe5d5f11","sha512":"566b31e91eac7625d6e3fe9e5f27785e728017019c6672f115c9620edeac51672f31ddd6d901a591c2152b3cbcf4288ed7914ba95270ce7261cbeb278bd0afbb","ssdeep":"768:yklO9zR5b3K1P6GlYscQ1OU7n7k/+KeJ/yRxjTLNwVhU2bzoslPQJ77GkmEzTFZ:yLL5jGKC1577S+d/yR92tvoOoJ2IZ","tlshash":"5323021a824cb9acf02ab6d2cf8e57ed82571c29d1b112761c5b14796dd73ccc4b90b7","first_seen":"2026-04-21T10:17:27.200574Z","last_seen":"2026-08-19T22:47:22.872705Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=d071e0e70f1c0a400c527fe7d8b3cd24\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567601\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.608Z","timestamp":1787179567608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=d071e0e70f1c0a400c527fe7d8b3cd24\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567601\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 425\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":425,"data":"data=0qHafQ8hMhHKtTc8f5KWB9z4s9cvBQIWPCFABqypyQcWPnuEPhyiyQz4s9cvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdH8PTXG1nmb1nohMhHGlNY5s2IWyh8hsnI41nz%2FyAKhf3uGrXrErNfhBdH4P9wVPhyiyAV%2Bl5Y%2BMnHAs26SsQl4snrhreIQs26ml5skrnDSIQHvyh8htnVvyAKhsAYQrnl8sQHArAfSI3D4l2OmI3rQl3c%2Bs5VvI3Hvs26hbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb1498a893181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":633,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"886501e521211e70caf6c09a223970b9","sha1":"a881b5c0ef437e00935adeb59cfa2e75475dbc8e","sha256":"96a61fe7fc989ee8a97dc536059f324b177e5a3f3da80590621a7f791fa300de","sha512":"29121da7999881e8244d882cfda3e6b44868266e608cbe8ffcb95b2e45f09ff54503baa0ff1e9261de8a0b0b06f1f1bb694499fdc8b6804e92ed97d016985bcf","ssdeep":"","tlshash":"90b01211165c16030e41514e620d270150a000504e208bd5846c4304070c0e97007051","first_seen":"2026-08-19T22:47:22.813213Z","last_seen":"2026-08-19T22:47:22.813213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=8ca88355be3da5a5acbd7571707f485e\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567608\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.614Z","timestamp":1787179567614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/log/log?plugin_sign=8ca88355be3da5a5acbd7571707f485e\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567608\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 676\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":676,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHGlNY5s2IWyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyms2l8s2Vhs9O8I9HAI3uQsQo5rQO8M2l9M3XVI5rhrdypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBA6%2Flqk8N5OSI5vqIAlmIeO4l5DhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzWt3IvrdmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyGX5rNHb1nohMhy4I2l5l2vklnOaI9cQI5saI56mIetvI5ymlnO5sAs8sqypyGX5rXz41naVyAK4IARjBdHpP9tbr3u4sCyi0qHhfQzSf9XqNSIafTYWfGohMGphs9zW19VVfqyilC8hP3zAsnj2t3zqsntVyAKjbC8hsSXqfQX%2FtuIAfQV8tdyiyhHzBdH5r3wbfQX%2Fr3XqN9aWr3DhMhH513uvPSfhbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb1499a9d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":605,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-08-19T23:17:48.298403Z","times_seen":2739,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026limit=20\u0026sender_type=0\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568009\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.038Z","timestamp":1787179568038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/recent-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026limit=20\u0026sender_type=0\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568009\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: fa409b4dc333fd6e0cfe589bdc12e6e7\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-type: application/json\r\ncf-ray: a2dcb14c5c4edfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 2b6ae104-f4fb-4b63-b99a-49a5a586f549\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":762,"mime_type":"application/json","magic":"JSON text data","md5":"78d539ac5b6a06a8bd02b3ace8debb63","sha1":"8e22651d8d1e678777cfebdb96983cf7df6e751a","sha256":"d817b79090a73b71e09ad6e2daa2c137408a7cfb7916aef50da18a1b1b0229f0","sha512":"e821cc4e11e272ac7ff31855b135a17839c3032c8d1e2a89683b7e937ac1443f8c7732821bf10fe3f120b05c9c5325e74f6b7616a478e5ff9c98ea2519e92a96","ssdeep":"","tlshash":"5390021218281c560b06a48a74091b0591d4114049141621cd8c5158870945c6582521","first_seen":"2023-05-07T20:28:16Z","last_seen":"2026-08-19T22:47:22.875306Z","times_seen":463,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/getUrl","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.151Z","timestamp":1787179567151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/getUrl HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:07Z","raw_expires":"Wed, 19-Aug-2026 23:10:07 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90,"size_decoded":462,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"97c6b172f7905aa2ee3a152bdcd8e7b9","sha1":"37eca29a8368989ff344ff90f960a6717f4a333f","sha256":"ad73b661b194808ca842a7f406cf7e9b8945e1f2298fc0d336e557abc4130a73","sha512":"bee6bf465db0917cff55a98643dee0f98df257dc4970ecced1c9ac918fb743985f6fd3a421fa7402546b62aaf44cc4730e1df57b3068d70bebb01b7dba768be3","ssdeep":"","tlshash":"d0b01204cc0c4492540a30c1005b551002d46db304408655c87c929cc81d0b13449868","first_seen":"2026-08-19T22:47:22.801062Z","last_seen":"2026-08-19T22:47:22.801062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/index","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.157Z","timestamp":1787179567157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/index HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:07Z","raw_expires":"Wed, 19-Aug-2026 23:10:07 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:07 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":318,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57460c23eccd5f7d892fdb4b53a4d6da","sha1":"5fe4dcda76dde8bba6862eef93bebff7cde7456e","sha256":"7dec9b9ab873c55b752e1f3f4a4f7cea73d8d200c8d1728ece2247dc6ddb4ff1","sha512":"c68f27481c472e2036339f3963059c1fb901d73f8e7e2262d024cfca1f95d19cc516fdcd7996457698b15af5f5561d4d474a86a64c7ed626ebb3e0a139031f7e","ssdeep":"","tlshash":"43e0cdcad92988616983f2d5226e082950da5793c18cd947fa8c9cf010f92247715442","first_seen":"2026-08-19T22:47:22.876323Z","last_seen":"2026-08-19T22:47:22.876323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mix-ads.oss-accelerate.aliyuncs.com/prod/project/g1nvrtk/p1_v2/integration/plugin/image/20260521/1779328195815/logo.png","fqdn":"mix-ads.oss-accelerate.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.254.187.140","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.866Z","timestamp":1787179565866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.oss-eu-central-1.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 21 Jan 2026 05:48:22 GMT","end":"Sun, 07 Feb 2027 03:11:39 GMT"},"fingerprint":{"sha1":"64:86:8B:A7:E4:DC:0E:74:32:46:53:69:3C:B8:E4:89:DD:F6:BD:55","sha256":"B8:C1:A5:52:E0:02:69:05:3E:47:AF:74:43:E0:AC:57:AB:A5:93:BF:4E:FF:3B:47:70:FE:C7:D9:C7:08:29:93"}}},"request":{"raw":"GET /prod/project/g1nvrtk/p1_v2/integration/plugin/image/20260521/1779328195815/logo.png HTTP/1.1\r\nHost: mix-ads.oss-accelerate.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Wed, 19 Aug 2026 22:46:06 GMT\r\nContent-Type: image/png\r\nContent-Length: 16499\r\nConnection: keep-alive\r\nx-oss-request-id: 6A86322E54A1414496A5C320\r\nVary: Origin\r\nAccept-Ranges: bytes\r\nETag: \"B6123E47147EA66A6984F248EDA36C5C\"\r\nLast-Modified: Thu, 21 May 2026 01:50:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13330232024773970881\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000110\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: thI+RxR+pmpphPJI7aNsXA==\r\nx-oss-server-time: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16499,"size_decoded":17064,"mime_type":"image/png","magic":"PNG image data, 2311 x 2311, 4-bit colormap, non-interlaced","md5":"b6123e47147ea66a6984f248eda36c5c","sha1":"55b3f3a8f312c9022ceb4df779b2e25f30681696","sha256":"19432322e1636e7c92e6ea83b1ca1696f20c53aa61427f1394d1f34577c7d92d","sha512":"98a3d185ac86c21e14a86b1a8f69a5897ba1f19161503f0723f3ad7c9fdb818b7e6152b4cda76da63a98f4bbe0796de1cddc5e4461fdd4961c3d59a08e2cdc25","ssdeep":"384:FxMv4SXa4rNR/QiZf5z+1+RSwQStsRtx7U0:7D94rfzM6QSsxB","tlshash":"ed72aece251d11a6904e4f05ce4c8011b91b91973b23ff58e6d4c4a3c32b92d55eabec","first_seen":"2026-08-19T22:47:22.793976Z","last_seen":"2026-08-19T22:47:22.793976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":0,"dns":92,"connect":21,"send":0,"wait":198,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://api.drdsy.com/ws","fqdn":"api.drdsy.com","domain":"drdsy.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.512Z","timestamp":1787179567512,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.drdsy.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 01:19:05 GMT","end":"Tue, 25 Aug 2026 01:19:04 GMT"},"fingerprint":{"sha1":"43:78:BF:CA:A3:7C:8A:D5:DE:A1:3A:A6:F2:5E:CB:73:41:50:C4:5D","sha256":"6C:F6:FB:F2:7C:C1:C4:45:9C:C4:CC:AB:C1:6D:D2:8B:1F:DA:D5:70:1B:41:70:23:4F:14:51:D3:BD:64:40:F5"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: api.drdsy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://otcdd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vqNqkCnsbuV+PC7hGn5qjg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 19 Aug 2026 22:46:08 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: qbF7h7JnXc4Ia0tizSkLQ06nrJE=\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":208,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":217,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.salesmartly.com/plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567559\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"widget.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.569Z","timestamp":1787179567569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widget.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:24:38 GMT","end":"Wed, 23 Sep 2026 18:24:36 GMT"},"fingerprint":{"sha1":"68:24:AA:01:FE:7C:74:44:2D:65:E9:35:7B:E9:90:1B:B6:1A:F5:FE","sha256":"36:B9:DE:DB:E9:14:9C:92:9B:DB:B9:F9:98:FB:47:A8:7B:41:C3:86:81:D4:1C:61:2F:BE:FB:FC:2E:54:74:D9"}}},"request":{"raw":"GET /plugin/info?plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567559\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: widget.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: 36540453aa4a844904fec0d00d284f96\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,Cache-Control,Content-Type,Authorization,Origin,Cpl,Client-Type,X-Requested-With,Accept,External-Sign\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE, UPDATE\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Cache-Control, Content-Language, Content-Type\r\nserver: cloudflare\r\nx-request-id: d3a13a82-10bd-4c1b-9178-ea528d0d254a\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a2dcb14a8cac56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4758,"size_decoded":2598,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a1b80aa7a97d6821dff2d39f9af69ebc","sha1":"277eac4b3a8026ce15cc1aa84b075de9f1c6f53e","sha256":"04aa9e8f85340f8e2eb2ce946db1a5881de4b63f0b74d1c67ae4d5a2d8ef0eae","sha512":"1fd536513f15cd49e896916db5b4f09434ccfb067ef1646870539efe66c31e279b53aaca359b2dd083089df79548352fb91251960b2858abb1e94187a43a632f","ssdeep":"96:CeUOla4pvbMNz9Zqs+as1MjODZL/H/dd7pfFXZdSDHQP3fG:hyuMNz9ss9py5/H/tyH63O","tlshash":"0fa15271a12bc822e29308a461fc9e205d9a9778c1dc8a04ddacde1d89fccf6a71750f","first_seen":"2026-08-19T22:47:22.878782Z","last_seen":"2026-08-19T22:47:22.878782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/install.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:01.816Z","timestamp":1787179561816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/install.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29e-3c48\"\r\nexpires: Thu, 20 Aug 2026 10:46:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15432,"size_decoded":5097,"mime_type":"application/javascript","magic":"C++ source, ASCII text","md5":"9828d547d173655e9b738ae8735e0e05","sha1":"eda255844eed6252e171887a2ca4c6a52477c555","sha256":"d20d5a46bcb75b6b5bb4e4eca60fb07ffd4effa9d18538f57b20c8ddb97bf449","sha512":"19e8bdd97db27081cb51a46ac32471caf6f2f39f52515397175d96c63ed44cd960e90e4af2523094934aa1ee78bc26333137a107380321fcbbf67ee9374046e6","ssdeep":"384:kCjrv6tmsEg1xdJzePf/ysezYqpQlM5xIEdKl:kCjrBsuqYqt5hdA","tlshash":"3162622321f211388b17703a181fd1153a16946b2e86bc613fcc8a649fdd67d86f2fe6","first_seen":"2026-08-19T22:47:22.8701Z","last_seen":"2026-08-19T22:47:22.8701Z","times_seen":1,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:04.010Z","timestamp":1787179564010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-YJ-x8pML.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a9-13dd9\"\r\nexpires: Thu, 20 Aug 2026 10:46:04 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81369,"size_decoded":19604,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"13cef6e27ffe8d8b37e8815c02029f2a","sha1":"88e59413032d7a813b32270a2fb7fc01bddf9782","sha256":"4211f668d11528acc38eef50b42b2e6424cda9c16410876e47b650e314cfe632","sha512":"b639616d93801abb5c05193acbfa4668d5751300a3dd6e168544ed0943e912dac61406f4b1cde4d42ea092657c4172b38e713416508b9ded4d59aadcda437c82","ssdeep":"1536:irCU7k6iej/Cqjetpa/Q2Gv01X2DhQWyAvwG:i2ok6iej/9jetpa/i092D+WPv9","tlshash":"16832f466bf92024a35770798c9f90097b3a841f0e46ad487e4c93f04f6c57c9bb9fa9","first_seen":"2026-08-19T22:47:22.845439Z","last_seen":"2026-08-19T22:47:22.845439Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/api/config/index","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:05.305Z","timestamp":1787179565305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /api/config/index HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding, Accept-Encoding\r\nset-cookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"0e6d9ea54e2316a0fe19f0d23d78928d","quoted":false,"path":"/","expires":"2026-08-19T23:10:05Z","raw_expires":"Wed, 19-Aug-2026 23:10:05 GMT","max_age":1440,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; expires=Wed, 19-Aug-2026 23:10:05 GMT; Max-Age=1440; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":318,"size_decoded":576,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"57460c23eccd5f7d892fdb4b53a4d6da","sha1":"5fe4dcda76dde8bba6862eef93bebff7cde7456e","sha256":"7dec9b9ab873c55b752e1f3f4a4f7cea73d8d200c8d1728ece2247dc6ddb4ff1","sha512":"c68f27481c472e2036339f3963059c1fb901d73f8e7e2262d024cfca1f95d19cc516fdcd7996457698b15af5f5561d4d474a86a64c7ed626ebb3e0a139031f7e","ssdeep":"","tlshash":"43e0cdcad92988616983f2d5226e082950da5793c18cd947fa8c9cf010f92247715442","first_seen":"2026-08-19T22:47:22.876323Z","last_seen":"2026-08-19T22:47:22.876323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566201\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.208Z","timestamp":1787179566208,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179566201\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nexternal-sign: e94a2ef3ba2da6e977c1b20cc5f7d529\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/json\r\ncf-ray: a2dcb140f9b1dfec-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://otcdd.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: d37b7b5e-a8fd-453d-a23e-d23a44d80507\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":776,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-08-19T22:47:22.881284Z","times_seen":1989,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/css/plugin-X2350_1o.css","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.230Z","timestamp":1787179566230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/css/plugin-X2350_1o.css HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 15 Aug 2026 02:44:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd29c-54069\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":344169,"size_decoded":94447,"mime_type":"text/css","magic":"ASCII text, with very long lines (22522)","md5":"90a48dfd03a349412719b3a600e2ae70","sha1":"3f0e2fa3f11273f515e0fc38fde55db212f72f1c","sha256":"f0735647535b6e76b0194bc040fa5660d1a4cafa70546bd2f27821f748f03467","sha512":"fcb4ef102b7c01cdfa36f9a24179d1abf515a63c41e02d5744c2d8951dd8e502015d36965432700c5ab3cd03c37e8f8c029fe6b3ddfaba37c15e75b6f9fe874a","ssdeep":"6144:qDj4UB4fc4QXzm5msGjwgAZSIsSY9BgWQmX+cmcmcD5IaINYtGQA3AdST4Poga4n:Sj4M4E4QXzm5msGjwgAZSIsSY9BgWQml","tlshash":"bf74daadafb11808bd2ad5542992f354e23d50d3ee5ecc38bae5300c8fc51c995b2f99","first_seen":"2026-08-19T22:47:22.854093Z","last_seen":"2026-08-19T22:47:22.854093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/plugin-BIBz0ozh.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.189Z","timestamp":1787179567189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/plugin-BIBz0ozh.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d; _ss_s_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:45:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2b2-108955\"\r\nexpires: Thu, 20 Aug 2026 10:46:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1083733,"size_decoded":226785,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (334)","md5":"960f93cf6f41905bfcbe6b4dfe580613","sha1":"98942031f6f17f9e27374b3d77dfbcb20a8efe99","sha256":"3d9f03c1e65f7675ddb016625a9a1ca11fd265cb67bf99a5270a0222e557b1fe","sha512":"9caedf149d14e8f3cf485e217bf2bb1821c2e30a8bba89b22195470c3912d98caf6be270f6f108c07caa2599ffa2468926051c2cb1932f1d741ba9f700860ec5","ssdeep":"12288:62Wc0SipL98f+N9u6QTZWJSszx9UCi6VmKl39MDfq47AHX2chLrsjMsn6C:sHX2G3sj5nr","tlshash":"0425c4aa65f124329363b0360d6f900427354a5f9d6c7ea43e9c56204f8d93ca7f2bed","first_seen":"2026-08-19T22:47:22.838768Z","last_seen":"2026-08-19T22:47:22.838768Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=d071e0e70f1c0a400c527fe7d8b3cd24\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567610\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:07.615Z","timestamp":1787179567615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Jul 2026 16:59:55 GMT","end":"Sat, 10 Oct 2026 17:59:53 GMT"},"fingerprint":{"sha1":"27:93:BA:DA:50:AB:57:59:CE:78:C4:85:11:3D:A5:0C:CF:AE:87:BB","sha256":"69:85:C7:7F:1F:CA:99:12:24:04:AC:53:DA:7E:74:F0:7A:AB:18:6C:8B:DD:13:2C:B8:A6:B4:17:C2:0C:E6:AB"}}},"request":{"raw":"POST /client/station/log?plugin_sign=d071e0e70f1c0a400c527fe7d8b3cd24\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179567610\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 425\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: ss_uid=b0fec0bbcf774e41194ff0dac9d4bda0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":425,"data":"data=0qHafQ8hMhHKtTc8f5KWB9z4s9cvBQIWPCFABqypyQcWPnuEPhyiyQz4s9cvBQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdH8PTXG1nmb1nohMhHGlNY5s2IWyh8hsnI41nz%2FyAKhf3uGrXrErNfhBdH4P9wVPhyiyAV%2Bl5Y%2BMnHAs26SsQl4snrhreIQs26ml5skrnDSIQHvyh8htnVvyAKhsAYQrnl8sQHArAfSI3D4l2OmI3rQl3c%2Bs5VvI3Hvs26hbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:07 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a2dcb1499aa23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":633,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"886501e521211e70caf6c09a223970b9","sha1":"a881b5c0ef437e00935adeb59cfa2e75475dbc8e","sha256":"96a61fe7fc989ee8a97dc536059f324b177e5a3f3da80590621a7f791fa300de","sha512":"29121da7999881e8244d882cfda3e6b44868266e608cbe8ffcb95b2e45f09ff54503baa0ff1e9261de8a0b0b06f1f1bb694499fdc8b6804e92ed97d016985bcf","ssdeep":"","tlshash":"90b01211165c16030e41514e620d270150a000504e208bd5846c4304070c0e97007051","first_seen":"2026-08-19T22:47:22.813213Z","last_seen":"2026-08-19T22:47:22.813213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/recent-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026limit=20\u0026sender_type=0\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568009\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.22.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:08.042Z","timestamp":1787179568042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 04:24:42 GMT","end":"Thu, 15 Oct 2026 05:24:40 GMT"},"fingerprint":{"sha1":"9E:33:85:67:70:1B:4F:B8:D1:EB:68:05:5F:92:57:7D:A2:27:69:7F","sha256":"EE:2F:33:B2:9D:C2:BA:37:C5:7A:B8:FA:32:C5:6E:B9:4A:8F:AC:F2:D6:7F:41:1F:95:C2:0F:C1:C8:63:5F:FD"}}},"request":{"raw":"OPTIONS /chat/chat-msg/recent-msg-list-v2?login_token=9a30a9bca07bc4afbd3fa09368ee76bd\u0026limit=20\u0026sender_type=0\u0026chat_user_id=45331981a57df76570947d7291a3b60c\u0026direction_type=1\u0026plugin_id=g1psa3o\u0026over_time=\u0026env=chat\u0026_=1787179568009\u0026_lt=9a30a9bca07bc4afbd3fa09368ee76bd\u0026_u=b0fec0bbcf774e41194ff0dac9d4bda0\u0026_xma_=718695 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://otcdd.com/\r\nOrigin: https://otcdd.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:46:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://otcdd.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a2dcb14c3bb4b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":558,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T01:30:40.329369Z","times_seen":17981838,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"otcdd.com/chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js","fqdn":"otcdd.com","domain":"otcdd.com","tld":"com"},"ip":{"addr":"43.229.114.210","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://otcdd.com/","date":"2026-08-19T22:46:06.490Z","timestamp":1787179566490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drdsy.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 14 Aug 2026 02:23:35 GMT","end":"Thu, 12 Nov 2026 02:23:34 GMT"},"fingerprint":{"sha1":"53:B0:24:BE:6F:B2:F6:3C:56:E5:74:5A:2A:A1:5D:C5:77:A3:12:F6","sha256":"7A:C0:73:66:7C:0A:4D:B6:7E:9D:C3:06:E9:6D:AD:38:92:83:12:81:23:52:6E:AC:B9:F8:FA:E7:2D:29:6C:CF"}}},"request":{"raw":"GET /chat/widget-v2/code/modern/js/chunk-common-Cg9wJ54n.js HTTP/1.1\r\nHost: otcdd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://otcdd.com/\r\nCookie: PHPSESSID=0e6d9ea54e2316a0fe19f0d23d78928d\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 22:46:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 15 Aug 2026 02:44:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7fd2a6-1410e\"\r\nexpires: Thu, 20 Aug 2026 10:46:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82190,"size_decoded":24954,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"17adcbf7b7d9c909bfd1f732a95f8ba4","sha1":"72bdc2f6e1689859df4ef00d9af8b12e5a48db83","sha256":"19121d1dbd7971b969a689d52a99965d17cadc82e0df4b6b39c902deb47642d5","sha512":"0d0bb10a93466eb1ff7e438bee906049874bfa8c8a45a165e1b52eb3bcccdfcfc6c44da1795f85f210023ec1ccc1ad82e702b24be53d9fe5db4af6b367248939","ssdeep":"1536:5+8FucURqp/tYiYA5vPpXn4Gj4oRPIxWxe+ikIAcUwcDr:gIcq3Yit5vBXRRGQGk9cUwi","tlshash":"0a8360866af130345307b0b9884fd809b325991b2d8dbd947d8c92a1af5c53c9bf6fd8","first_seen":"2026-08-19T22:47:22.863734Z","last_seen":"2026-08-19T22:47:22.863734Z","times_seen":1,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}