{"report_id":"c9728047-5e52-4ee8-a9e5-87f7716a3d2e","version":0,"status":"done","tags":[],"date":"2026-07-14T21:08:27Z","url":{"schema":"http","addr":"ogfortcost.com","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"ogfortcost.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"title":"Loading","dom":{"size":2685175,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51216)","md5":"561f713cf19b78ecedcac4db886205eb","sha1":"97ef8a6779f998b7346b790024c4c6a8c4a7a317","sha256":"4008ce3f8ef078cc99e73392ae84b5b7e0be68601ea2b5b52f24b5e962057cd9","sha512":"a701fa6b8122f5c3530883f32ff82eda151d3f76c27d41c87ee62e89a6f24d978877b8bc76b0626f4535cf18395aa6587dbce2f6625394b740032de7f7d38cd0","ssdeep":"12288:s178Iy4BXu/yP6f7GWgjmmz2PfWYfsp8XPmeGeousG8DLR6cRAVtdKu4Qa6t0tqS:y7Hy4BXM3mqfQyVi","tlshash":"25c5a7d23591b5ae008787723a8e56f654bfc505c6caa44df88c9eedf0dcea325887c4","dom_hash":"domhashd9fedc4cc384579a446a5266c87bb20c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ogfortcost.com","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T21:08:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ogfortcost.com","ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-07-12","domain_rank":0,"first_seen":"2026-07-14T21:06:51.527683Z","last_seen":"2026-07-14T21:06:51.527683Z","alert_count":0,"request_count":3,"received_data":2455248,"sent_data":2420,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ogfortcost.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee35f1bc4d6b30c8a666445625ce6dba","sha1":"33adeab7bee4e355f0ea2ff9e8489631d6924e92","sha256":"cd5063fc3c79d3045604519c50db14f2cf69dcdc98c769073eb189d74f071c10","sha512":"fa854395c9878c8bf4c32bd24a40f8d3d539346ecbef4e9091cc3fd8b2fce2446957e3c7e7175b9dbb1b5d4cc1f8bd75323a058efc08af18b73b7f00cfcd29ea","ssdeep":"12288:mfsp8XPmeGeousG8DLR6cRAVtdKu4Qa6t0tqB5mhjOBH9ej2VlPvy9FRNgk2GiIk:VyVb","tlshash":"fab544d23591b5ae008787723a8e66f654bfc505c6caa44df88c9eedf0dcda325887c4","size":2350903,"data":"","first_seen":"2026-07-14T21:10:21.862108Z","last_seen":"2026-07-14T21:10:21.862108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"map[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 preview:map[kind:Object ownProperties:map[] ownPropertiesLength:0] sealed:false type:object]","filename":"https://ogfortcost.com/","line_number":746,"column_number":214},{"level":"debug","text":"","filename":"https://ogfortcost.com/","line_number":750,"column_number":57}]},"http":[{"url":{"schema":"https","addr":"ogfortcost.com/","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T21:07:56.313Z","timestamp":1784063276313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogfortcost.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 15:50:55 GMT","end":"Sat, 10 Oct 2026 15:50:54 GMT"},"fingerprint":{"sha1":"7A:93:38:60:40:30:F5:3D:44:B1:85:C3:B9:53:55:98:D5:6C:CF:97","sha256":"F2:EF:30:D4:B9:9E:E8:9F:86:E0:6C:0F:9C:EE:0E:F5:9E:B3:AC:78:00:55:57:90:F9:D5:83:FC:90:6A:63:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ogfortcost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 23879\r\ncache-control: no-store\r\nx-edge-action: challenge\r\nset-cookie: sil_ses=fcdf60fa894ee34206e074193b0aee4d; Path=/; Domain=ogfortcost.com; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=fcdf60fa894ee34206e074193b0aee4d; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZACKnrWlDYd3vLKW7pTf.oBFbfzqfDa65x8DYsQMHLgJUqgpt-Rk-pL1_f8hkLhOa9Cp05BG3Jx2WWXgCibDx9Sqf_PC6K3B9HuRNr5B6AA; Path=/; Domain=ogfortcost.com; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZACKnrWlDYd3vLKW7pTf.oBFbfzqfDa65x8DYsQMHLgJUqgpt-Rk-pL1_f8hkLhOa9Cp05BG3Jx2WWXgCibDx9Sqf_PC6K3B9HuRNr5B6AA; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 21:07:57 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":86130,"size_decoded":24849,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12636)","md5":"14ead813db06123eaa8860a90f1c49b9","sha1":"8bdaa32712b6cb725aab60ea8c522a34cf6bee22","sha256":"8b99f997f9c3894569277b5c7f26414568659c1616e6dabf4b42f9b878a62685","sha512":"0460ab5040d2ec1dfacfca3bdcbe7117babd9bb3fa11758fadb09af92c1e7326f23adbbcaa7107fc439471a69e6632521d21cb41d258b1cf775fd0a60f4f586f","ssdeep":"1536:w20wKTGzYlTCc6KNdQny6+QTjZNOU5RRvV:yJTCc6KNdQny6+QTjZLV","tlshash":"5383b6e52239302d81630a75362f028199bfc461dcc695ccf88ed9ae6badb631d757cc","first_seen":"2026-07-14T21:10:21.859369Z","last_seen":"2026-07-14T21:10:21.859369Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1205,"timings":{"blocked":-1,"dns":122,"connect":60,"send":0,"wait":881,"receive":70,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogfortcost.com/.rt/challenge?tier=captcha\u0026return_to=%2F","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T21:07:58.013Z","timestamp":1784063278013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogfortcost.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 15:50:55 GMT","end":"Sat, 10 Oct 2026 15:50:54 GMT"},"fingerprint":{"sha1":"7A:93:38:60:40:30:F5:3D:44:B1:85:C3:B9:53:55:98:D5:6C:CF:97","sha256":"F2:EF:30:D4:B9:9E:E8:9F:86:E0:6C:0F:9C:EE:0E:F5:9E:B3:AC:78:00:55:57:90:F9:D5:83:FC:90:6A:63:48"}}},"request":{"raw":"GET /.rt/challenge?tier=captcha\u0026return_to=%2F HTTP/1.1\r\nHost: ogfortcost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ogfortcost.com/\r\nCookie: sil_ses=fcdf60fa894ee34206e074193b0aee4d; __Host-sil_ses=fcdf60fa894ee34206e074193b0aee4d; sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZACKnrWlDYd3vLKW7pTf.oBFbfzqfDa65x8DYsQMHLgJUqgpt-Rk-pL1_f8hkLhOa9Cp05BG3Jx2WWXgCibDx9Sqf_PC6K3B9HuRNr5B6AA; __Host-sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZACKnrWlDYd3vLKW7pTf.oBFbfzqfDa65x8DYsQMHLgJUqgpt-Rk-pL1_f8hkLhOa9Cp05BG3Jx2WWXgCibDx9Sqf_PC6K3B9HuRNr5B6AA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 698409\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: sil_ses=fcdf60fa894ee34206e074193b0aee4d; Path=/; Domain=ogfortcost.com; Max-Age=86400; HttpOnly; Secure; SameSite=None\n__Host-sil_ses=fcdf60fa894ee34206e074193b0aee4d; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=None; Partitioned\nsil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZAGMnrWlDYd3vLKW7pTf.A3zpxHWYWxvqxPtGI4LVXPVEkJoCTus3D0uMxBDSnA5iA0QNNIC-KrXimlslS9sDrV1cK_xuxQ9HFYYAXponAQ; Path=/; Domain=ogfortcost.com; Max-Age=600; HttpOnly; Secure; SameSite=None\n__Host-sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZAGMnrWlDYd3vLKW7pTf.A3zpxHWYWxvqxPtGI4LVXPVEkJoCTus3D0uMxBDSnA5iA0QNNIC-KrXimlslS9sDrV1cK_xuxQ9HFYYAXponAQ; Path=/; Max-Age=600; HttpOnly; Secure; SameSite=None; Partitioned\r\nx-edge-action: captcha\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 14 Jul 2026 21:07:58 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2366967,"size_decoded":699405,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (49179)","md5":"f5bfe0e899ba0f4676ac8a2b922b0b8c","sha1":"0d2901264b5f360e24720ae976a326cb582527ac","sha256":"d5bf977302835460f655259aa2690638ee48e2fb9c9afd403eb6a7b00b35580f","sha512":"852649377f391333d39d773378c39e0108047355a21744492d6be7144fb83c1838604f16c7dd0edfbd614d55e60990ae07f0c0b43a321ad07c7dc87b1d3fea46","ssdeep":"12288:+fsp8XPmeGeousG8DLR6cRAVtdKu4Qa6t0tqB5mhjOBH9ej2VlPvy9FRNgk2GiIX:1","tlshash":"b52503d23591b5ae008787723a8a67f654bfc505d6caa44af88c5eedf0dcdb325887c0","first_seen":"2026-07-14T21:10:21.860363Z","last_seen":"2026-07-14T21:10:21.860363Z","times_seen":1,"resource_available":true,"data":null}},"time_used":765,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":493,"receive":272,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogfortcost.com/.rt/ce","fqdn":"ogfortcost.com","domain":"ogfortcost.com","tld":"com"},"ip":{"addr":"91.92.243.12","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ogfortcost.com/.rt/challenge?tier=captcha\u0026return_to=%2F","date":"2026-07-14T21:07:58.931Z","timestamp":1784063278931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ogfortcost.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Jul 2026 15:50:55 GMT","end":"Sat, 10 Oct 2026 15:50:54 GMT"},"fingerprint":{"sha1":"7A:93:38:60:40:30:F5:3D:44:B1:85:C3:B9:53:55:98:D5:6C:CF:97","sha256":"F2:EF:30:D4:B9:9E:E8:9F:86:E0:6C:0F:9C:EE:0E:F5:9E:B3:AC:78:00:55:57:90:F9:D5:83:FC:90:6A:63:48"}}},"request":{"raw":"POST /.rt/ce HTTP/1.1\r\nHost: ogfortcost.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://ogfortcost.com/.rt/challenge?tier=captcha\u0026return_to=%2F\r\nContent-Length: 139\r\nOrigin: https://ogfortcost.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: sil_ses=fcdf60fa894ee34206e074193b0aee4d; __Host-sil_ses=fcdf60fa894ee34206e074193b0aee4d; sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZAGMnrWlDYd3vLKW7pTf.A3zpxHWYWxvqxPtGI4LVXPVEkJoCTus3D0uMxBDSnA5iA0QNNIC-KrXimlslS9sDrV1cK_xuxQ9HFYYAXponAQ; __Host-sil_gate=ASBmY2RmNjBmYTg5NGVlMzQyMDZlMDc0MTkzYjBhZWU0ZAGMnrWlDYd3vLKW7pTf.A3zpxHWYWxvqxPtGI4LVXPVEkJoCTus3D0uMxBDSnA5iA0QNNIC-KrXimlslS9sDrV1cK_xuxQ9HFYYAXponAQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":139,"data":"{\"p\":\"init\",\"cid\":\"4b47b715bf0f11f125579aaf42f4debe6e8497bb7b1f2fda943ba42e8d77e580\",\"kind\":\"slide_puzzle\",\"subtle\":true,\"t\":1784063278929}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: application/json\r\nx-incident-id: nl1::1784063278-WMpuwtO1Epc5TnDJ3GU9veHYFYVWJUGW\r\ndate: Tue, 14 Jul 2026 21:07:58 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":1267,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T07:40:29.745339Z","times_seen":17332420,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}