{"report_id":"d448aa0a-b48f-49b0-bf87-c5b13dab1c12","version":0,"status":"done","tags":[],"date":"2026-09-07T19:12:52Z","url":{"schema":"http","addr":"variational-omni.top/","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"variational-omni.top/captcha.php","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"title":"Verify","dom":{"size":5157,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2161)","md5":"a8dd7b9f423093bb5bd73e354e3945dd","sha1":"a047aca10b3f29bdb5d6d249a287a3bf16219660","sha256":"2f4c9168c3eae19a64fbb7530291c9e024d5f8c8eab3eae04239429f96425a81","sha512":"c9c7879323f0ef45089284358491ef71f6c833984eca51fca7b5770f0b063df8707f974c4aaaae97c90bf151b837088cba8fdabe72320b0caccce80a6f0c74b1","ssdeep":"96:nhRaUwiGbShQckL7s2ZRENUAkLBITHTjPCc1k4DpiWNrnfShQckL7s2ZRENUAkLK:hRaUD6js2ZRENUAkLBITw2p5N+6js2ZA","tlshash":"e9b166b422b20d052c6bb196d81eb7cdd322af07f682682874dd57503bcf6fa4453b69","dom_hash":"domhash8a70996b01dd8aea21082e109b55029f","first_seen":"2026-09-07T19:12:58.029176Z","last_seen":"2026-09-07T19:12:58.029176Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"variational-omni.top/","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T19:12:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bf949ebc4f79.w.hcaptcha.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-07T19:12:56.102846Z","last_seen":"2026-09-07T19:12:56.102846Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"variational-omni.top","ip":{"addr":"153.80.240.154","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-08-23","domain_rank":0,"first_seen":"2026-09-07T19:07:40.442719Z","last_seen":"2026-09-07T19:07:40.442719Z","alert_count":6,"request_count":3,"received_data":2439,"sent_data":1516,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-09-02T20:55:43.21866Z","alert_count":0,"request_count":3,"received_data":2312634,"sent_data":2529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-09-03T07:01:31.34746Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-09-04T10:01:35.89501Z","alert_count":0,"request_count":1,"received_data":355425,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"f77548dbe236.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":0,"first_seen":"2026-09-07T19:12:56.101905Z","last_seen":"2026-09-07T19:12:56.101906Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-10-07T11:46:35.362583Z","times_seen":72383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-10-07T12:40:37.469983Z","times_seen":455157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9007e6686e64b6099805fd9e2e1af13","sha1":"eb72e16e4faac73bda7bb4ddc7f24f3ae3f9c108","sha256":"0fe8c113351a311abcab08b69eacc8de8e91646db94265b7e67e1ef032a1cccf","sha512":"b9d1a6854ea7b05a2c3627ef73092b27f61163af76a25e78ba016167a59f8788959cb7bc1f153688275f899019879c54c27244d48f5867bd00a078cf88494664","ssdeep":"6144:ewhy/clxaJq1XRQV8PsGfERdnKSaGcxnb+RIB6iFmaKwqZZ3Egxwp+dJNC:juQaJq1XR9CA6iuwo7C","tlshash":"3ad4e77b6310322e46d592d980ee250b53b1d53a601651dcf731eceface988a143ef7a","size":623840,"data":"","first_seen":"2026-09-04T20:24:58.925901Z","last_seen":"2026-09-08T04:52:26.371734Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"542047d5519f8f7786da3347cacd50f1","sha1":"26126775ecd7dc31220350803c52a7906f5b7f84","sha256":"044864a3a23637e127e34fb229fb61ad454086cdcddc913be30cf177d1808f2d","sha512":"a95b0d5e19779e50e983254ac5cffb26bd6f0245baf36a4d931a9c8edfdba26ebcc7e331a13c32504e6002f7a8d5ee3e353fe6d85d2340f9eb90c38498b7f78b","ssdeep":"","tlshash":"699004dd34c370104753115400571cc4f074dc70144c4d40c04cd4511cd5030711d45c","size":39,"data":"","first_seen":"2023-05-12T18:19:29Z","last_seen":"2026-10-07T11:53:42.004675Z","times_seen":5045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-10-07T11:53:41.958116Z","times_seen":67646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/8a25dbbfcf2a724f87b05cd8a6784cc93156e210a2c53cbefd51b6999150df4f/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b1792789c3a4b4acf826653bd579a1d","sha1":"3026e64d7c91aae6ef80723fb0194a6977e92248","sha256":"60a2d186d04372f493e1d9d907bdb2f0e3cd3de995f810a17a0ac10deaf070b0","sha512":"da80f1c9498acf4f0b1490efc2568b95a43e27b711db5d7dc299cb9c3f68bbc30339ff40dfc3c8b9e035d6929be1bc8cb1e3781d1af812c7e8773e575703c852","ssdeep":"24576:3Pl8oB57sEZoY1LFPzwFy+kLj1SNyX7jzpEdkyazlEy66yTdtFQXrR58cjLf:fdl7J","tlshash":"27355d7e5762d66aeb7319bd4d0e30877c4888bb52568ca0df8ecdb3a06407f48591ec","size":1059638,"data":"","first_seen":"2026-09-03T20:26:49.847089Z","last_seen":"2026-09-08T18:20:43.976138Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"variational-omni.top/captcha.php","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ad485299e96643ef8548e1f7af620e9","sha1":"f471576298ee2edb610a88cc48f84c3b7df4ef45","sha256":"fe992a98d0a377b3a829240b9d13f3727c8e81fa06e63b6c6da910834899ce05","sha512":"df952db1bab25c0af644190a351ef7bc88260200cbe2d627b2620d1f29389922fee4fb2b1fbfcf130abe306d3a4bace0f339cb5c094649333a4a147c0a91726b","ssdeep":"","tlshash":"a3017b6a25e610610e2ff1bd456ba444b1226027a8cbdc057d1c52e47fbc23e8676f48","size":745,"data":"","first_seen":"2026-09-07T19:07:45.526145Z","last_seen":"2026-09-07T19:12:58.059081Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=checkbox\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9007e6686e64b6099805fd9e2e1af13","sha1":"eb72e16e4faac73bda7bb4ddc7f24f3ae3f9c108","sha256":"0fe8c113351a311abcab08b69eacc8de8e91646db94265b7e67e1ef032a1cccf","sha512":"b9d1a6854ea7b05a2c3627ef73092b27f61163af76a25e78ba016167a59f8788959cb7bc1f153688275f899019879c54c27244d48f5867bd00a078cf88494664","ssdeep":"6144:ewhy/clxaJq1XRQV8PsGfERdnKSaGcxnb+RIB6iFmaKwqZZ3Egxwp+dJNC:juQaJq1XR9CA6iuwo7C","tlshash":"3ad4e77b6310322e46d592d980ee250b53b1d53a601651dcf731eceface988a143ef7a","size":623840,"data":"","first_seen":"2026-09-04T20:24:58.925901Z","last_seen":"2026-09-08T04:52:26.371734Z","times_seen":345,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"20dbdf1d969f1c0400e0c43a031628b8","sha1":"89de42143f70ecaba3d7faeeed3bddb835ab3c11","sha256":"1a33643f08054709dfa268bc7ec389f2e94dda33ed49cf364237ba71266e0dad","sha512":"5e823cc2bedbe1af1f7a791c59c202466c0f2a63bb998dfeee16b0b1e5898ae0cdb542ddf68566166901d67cd0e2ea95567a6e27745172ad8bd9cf73e0ca46a2","ssdeep":"6144:DwH+YR9iA2vupqp3a/aj4hY6Lq+aEKSaGcxnb+d0Awq:yAuGCJ","tlshash":"cb74617b1351632f57d046d9c0ea290757b0d627642851ecf332acefedca88a4439ba7","size":354559,"data":"","first_seen":"2026-09-04T20:24:58.909061Z","last_seen":"2026-09-08T04:52:26.365594Z","times_seen":359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"variational-omni.top/captcha.php","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T19:12:14.488Z","timestamp":1788808334488,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"variational-omni.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 11:28:06 GMT","end":"Fri, 04 Dec 2026 11:28:05 GMT"},"fingerprint":{"sha1":"73:05:2A:03:AE:46:27:48:C7:B5:26:97:F2:7D:11:4A:4C:82:7C:56","sha256":"38:66:A8:20:FA:E3:F6:19:9C:8E:F1:4C:D0:7F:DF:44:B3:43:70:85:FC:30:E1:92:A3:78:31:B4:7A:0D:68:4E"}}},"request":{"raw":"GET /captcha.php HTTP/1.1\r\nHost: variational-omni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.4\r\nDate: Mon, 07 Sep 2026 19:12:14 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 806\r\nConnection: keep-alive\r\nCache-Control: no-store, no-cache, must-revalidate\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"hCaptcha:1","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":1532,"size_decoded":1068,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"2a1d004b5f73183ca8b12449f6012331","sha1":"cd1059479b303d54cf5d7de2fa7372c3446d1bf4","sha256":"969dbea9ea8920c8d2cbdad206933c11d3faddb1c6bb3f543343ac01c0faef5d","sha512":"a54d28a950b865da9484fd5da9d1db363783cce2f9d4eee1be0c0c17bebd9fa4a5be77431302bcaf9216526e90994f51eec16f3bfcac757827b6c8f76581debf","ssdeep":"","tlshash":"d131126a75d300505d2be1bd0977750c7126e01be68e8c053d2d62a49fdc27e89b7f9c","first_seen":"2026-09-07T19:07:45.521614Z","last_seen":"2026-09-07T19:12:58.038636Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=checkbox\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://variational-omni.top/captcha.php","date":"2026-09-07T19:12:15.110Z","timestamp":1788808335110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://variational-omni.top/\r\nCookie: __cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:12:15 GMT\r\ncontent-type: text/html\r\ncf-ray: a378061e7c60569a-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":625592,"size_decoded":190744,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"8b60b3a2cc7110011e85bc72e5bb5686","sha1":"5525a3e08df51cc8b954a228829761402497c2ce","sha256":"80deffb986011c76843cceafab24bad435ee87068d34b8842292b08608c5d475","sha512":"8b5cef9594199399a32a91f0db4c9f9a6e5387659cd968af6eb328ad91e45a7d711e35344d636fd3cadfea05cdbfd1c14a8cc0f9330f2fd7f44b11fe1c33e369","ssdeep":"6144:Lwhy/clxaJq1XRQV8PsGfERdnKSaGcxnb+RIB6iFmaKwqZZ3Egxwp+dJN1:8uQaJq1XR9CA6iuwo71","tlshash":"b6d4e77b2311322e46d592d980ee250b53b1d53a601651dcf731eceface988a143af7b","first_seen":"2026-09-04T20:24:58.906175Z","last_seen":"2026-09-08T04:52:26.355684Z","times_seen":342,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=80ba88939126ef29d32e1ca12bb3054eb9b51927\u0026host=variational-omni.top\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-07T19:12:15.535Z","timestamp":1788808335535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"POST /checksiteconfig?v=80ba88939126ef29d32e1ca12bb3054eb9b51927\u0026host=variational-omni.top\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:12:15 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a37806212906569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1240,"mime_type":"application/json","magic":"JSON text data","md5":"3bc9379d485b077ded3cd0a864a66459","sha1":"89facc21ba852ccc442bb43e9b5c4e5853726bff","sha256":"3679d4b346e6192a8d26d322999bf51a55e1c0c47abedaea60ed8491377d0454","sha512":"551491c3eb55721648fae8970c3807f6bdaaa2661225f189cc9e2696e9fe6a028ac87a7845a45a5dc69fdf74c926c0d973963102780d60fe5a27f3c1b3296840","ssdeep":"","tlshash":"e601c5ea2742ed33b203414ae00c7b104e7201f260d72b2c388d40b616ecc8f5923dba","first_seen":"2026-09-07T19:12:58.042812Z","last_seen":"2026-09-07T19:12:58.042812Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":5,"dns":5,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/8a25dbbfcf2a724f87b05cd8a6784cc93156e210a2c53cbefd51b6999150df4f/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-07T19:12:15.627Z","timestamp":1788808335627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /c/8a25dbbfcf2a724f87b05cd8a6784cc93156e210a2c53cbefd51b6999150df4f/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html\r\nCookie: __cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:12:15 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\netag: \"4b1792789c3a4b4acf826653bd579a1d\"\r\nvary: Accept-Encoding, Origin\r\ncf-cache-status: HIT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-ray: a3780621a9dc569a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059638,"size_decoded":466145,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"d6d8d54548b2c719a926fa48615cb8bf","sha1":"3a344a0e876ad7b9cfb6a0847c8dc3f3bb043d6f","sha256":"4bdbac8da2f221aa946cc8bd22b2ed08899a21a73f9ce37c63cf194f9e33cdd2","sha512":"4b92522ed0b3a53793a0fedb26eada8e62ff9173600477e3a34af7d4581181854e824ae2ca72224f2c55dfd6b5cf26a025d6f794e80d7e21b3cf4abca2634f79","ssdeep":"24576:3Pl8oB57sEZoY1LFPzwFy+kLj1SNyX7jzpEdkyazlEy66yTdtFQXrR58cjL+:fdl7I","tlshash":"7b254d7e4762d66aeb7319bd4d0a34877c4888bb52578ca0df8ecdb3a06407f48591ec","first_seen":"2026-09-03T20:26:49.717101Z","last_seen":"2026-09-08T18:20:43.818572Z","times_seen":6,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"variational-omni.top/","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T19:12:14.404Z","timestamp":1788808334404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"variational-omni.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 11:28:06 GMT","end":"Fri, 04 Dec 2026 11:28:05 GMT"},"fingerprint":{"sha1":"73:05:2A:03:AE:46:27:48:C7:B5:26:97:F2:7D:11:4A:4C:82:7C:56","sha256":"38:66:A8:20:FA:E3:F6:19:9C:8E:F1:4C:D0:7F:DF:44:B3:43:70:85:FC:30:E1:92:A3:78:31:B4:7A:0D:68:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: variational-omni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.30.4\r\nDate: Mon, 07 Sep 2026 19:12:14 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: captcha.php\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T12:41:02.963079Z","times_seen":18914456,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://variational-omni.top/captcha.php","date":"2026-09-07T19:12:14.955Z","timestamp":1788808334955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /1/api.js HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://variational-omni.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:12:15 GMT\r\ncontent-type: application/javascript\r\ncf-ray: a378061daae5569a-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Mon, 07 Sep 2026 19:42:14 GMT\r\ncache-control: max-age=300\r\netag: W/\"ad933f1e67be462e4fa5978b33aafcaf\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-07T19:42:14Z","raw_expires":"Mon, 07 Sep 2026 19:42:14 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Mon, 07 Sep 2026 19:42:14 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":354559,"size_decoded":102148,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"20dbdf1d969f1c0400e0c43a031628b8","sha1":"89de42143f70ecaba3d7faeeed3bddb835ab3c11","sha256":"1a33643f08054709dfa268bc7ec389f2e94dda33ed49cf364237ba71266e0dad","sha512":"5e823cc2bedbe1af1f7a791c59c202466c0f2a63bb998dfeee16b0b1e5898ae0cdb542ddf68566166901d67cd0e2ea95567a6e27745172ad8bd9cf73e0ca46a2","ssdeep":"6144:DwH+YR9iA2vupqp3a/aj4hY6Lq+aEKSaGcxnb+d0Awq:yAuGCJ","tlshash":"cb74617b1351632f57d046d9c0ea290757b0d627642851ecf332acefedca88a4439ba7","first_seen":"2026-09-04T20:24:58.909061Z","last_seen":"2026-09-08T04:52:26.365594Z","times_seen":359,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":13,"connect":14,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"variational-omni.top/favicon.ico","fqdn":"variational-omni.top","domain":"variational-omni.top","tld":"top"},"ip":{"addr":"153.80.240.154","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://variational-omni.top/captcha.php","date":"2026-09-07T19:12:15.040Z","timestamp":1788808335040,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"variational-omni.top","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 05 Sep 2026 11:28:06 GMT","end":"Fri, 04 Dec 2026 11:28:05 GMT"},"fingerprint":{"sha1":"73:05:2A:03:AE:46:27:48:C7:B5:26:97:F2:7D:11:4A:4C:82:7C:56","sha256":"38:66:A8:20:FA:E3:F6:19:9C:8E:F1:4C:D0:7F:DF:44:B3:43:70:85:FC:30:E1:92:A3:78:31:B4:7A:0D:68:4E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: variational-omni.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://variational-omni.top/captcha.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.30.4\r\nDate: Mon, 07 Sep 2026 19:12:15 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 283\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.30.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":283,"size_decoded":458,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"bd8ed3b1be0039367128a16adb31e3bd","sha1":"dd0339067cb8ad05794df6bef91e0b821901a416","sha256":"d574ef8b59cc7434311d44a8d003afa08455c5e87f677d8a49ce7dcc153cd4b6","sha512":"c6739f5768107dc36d10d2bb0d6d6ad0ee76ce072f77ef391ac71766892f2cf5f417ed3a27d6fe53ff0e190031487874229e9278c2f3c11524ee4e9f7c67248e","ssdeep":"","tlshash":"63d0ebdfa003b3870802205038c250c2278c33e6a07a82a82cc2d4c7029813ece8ae8c","first_seen":"2026-09-07T19:07:45.512691Z","last_seen":"2026-09-07T19:12:58.049752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"variational-omni.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.230.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://variational-omni.top/captcha.php","date":"2026-09-07T19:12:15.108Z","timestamp":1788808335108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://variational-omni.top/\r\nCookie: __cf_bm=3jSSvicqEyzq05zqZ9RpghPtTujX9bMSpvyMqCHEbVA-1788808334.9869943-1.0.1.1-G6.Hny71ZNDVUJoUHp4xw3hbRyzb_fqXGI0hC1RIDBi.9s4_lrLBlfZJco.DC_U11CPAz8JBNdwQsLYjkHBpB3Ryu1Q_JW94nB.Uq3cQgLaHo0DBnDmDRgLaT5ORouyN\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:12:15 GMT\r\ncontent-type: text/html\r\ncf-ray: a378061e7c5b569a-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":625592,"size_decoded":190466,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"8b60b3a2cc7110011e85bc72e5bb5686","sha1":"5525a3e08df51cc8b954a228829761402497c2ce","sha256":"80deffb986011c76843cceafab24bad435ee87068d34b8842292b08608c5d475","sha512":"8b5cef9594199399a32a91f0db4c9f9a6e5387659cd968af6eb328ad91e45a7d711e35344d636fd3cadfea05cdbfd1c14a8cc0f9330f2fd7f44b11fe1c33e369","ssdeep":"6144:Lwhy/clxaJq1XRQV8PsGfERdnKSaGcxnb+RIB6iFmaKwqZZ3Egxwp+dJN1:8uQaJq1XR9CA6iuwo71","tlshash":"b6d4e77b2311322e46d592d980ee250b53b1d53a601651dcf731eceface988a143af7b","first_seen":"2026-09-04T20:24:58.906175Z","last_seen":"2026-09-08T04:52:26.355684Z","times_seen":342,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":2,"dns":5,"connect":0,"send":0,"wait":37,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"f77548dbe236.w.hcaptcha.com/logo.png","fqdn":"f77548dbe236.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://variational-omni.top/captcha.php","date":"2026-09-07T19:12:15.112Z","timestamp":1788808335112,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: f77548dbe236.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://variational-omni.top/\r\nOrigin: https://variational-omni.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 07 Sep 2026 19:12:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=oqrJPXI..DFZKe5YE.K.Zx3wDidFvsdKngmGJmaA1Vg-1788808335.1627018-1.0.1.1-3mmhom1YKGswSqPXKBwu97EldKX1xmGgbZJ7nPAbANlN7zb8JSU9TzStj8ECGZB7v6RQqWy5xpda9bj31h7ISD2LTBf8XvWINWc3qkTjc2_bFfVeSs3oSD3EKGYjNEwb; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Mon, 07 Sep 2026 19:42:15 GMT\r\nServer: cloudflare\r\nCF-RAY: a378061ec8905687-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"oqrJPXI..DFZKe5YE.K.Zx3wDidFvsdKngmGJmaA1Vg-1788808335.1627018-1.0.1.1-3mmhom1YKGswSqPXKBwu97EldKX1xmGgbZJ7nPAbANlN7zb8JSU9TzStj8ECGZB7v6RQqWy5xpda9bj31h7ISD2LTBf8XvWINWc3qkTjc2_bFfVeSs3oSD3EKGYjNEwb","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-07T19:42:15Z","raw_expires":"Mon, 07 Sep 2026 19:42:15 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=oqrJPXI..DFZKe5YE.K.Zx3wDidFvsdKngmGJmaA1Vg-1788808335.1627018-1.0.1.1-3mmhom1YKGswSqPXKBwu97EldKX1xmGgbZJ7nPAbANlN7zb8JSU9TzStj8ECGZB7v6RQqWy5xpda9bj31h7ISD2LTBf8XvWINWc3qkTjc2_bFfVeSs3oSD3EKGYjNEwb; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Mon, 07 Sep 2026 19:42:15 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"da0697f804e259cc50aa5e67e657426a","sha1":"5cf2852de303f6e491b4027b03402c0200c2497a","sha256":"f306cc93d61fff4287a824e9c5926d85239a84c9b99e7556eb0449991109a527","sha512":"86b2513822c29ff533670d99794f59221b9de5a4daf05c5fea6eea8f0dddab8180f065b667563c23147eec12a8973a6d739dc407db1447dbb6f89e068426df5a","ssdeep":"","tlshash":"7451938bdf54028fc81e0eb065544f16a3f68fb93b1cab471900b9617fb13ea391a349","first_seen":"2026-09-07T19:12:58.05089Z","last_seen":"2026-09-07T19:12:58.05089Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":24,"connect":1,"send":0,"wait":19,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bf949ebc4f79.w.hcaptcha.com/logo.png","fqdn":"bf949ebc4f79.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/80ba88939126ef29d32e1ca12bb3054eb9b51927/static/hcaptcha.html#frame=challenge\u0026id=0iquu0wxvqmp\u0026host=variational-omni.top\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=6686c492-f4ec-4ec0-9888-18fa89ace902\u0026theme=light\u0026origin=https%3A%2F%2Fvariational-omni.top\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-07T19:12:15.355Z","timestamp":1788808335355,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bf949ebc4f79.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T12:41:02.963079Z","times_seen":18914456,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
