{"report_id":"f3cdffc6-a9ef-4f08-bc60-218914ea80e5","version":0,"status":"done","tags":[],"date":"2026-08-28T13:46:53Z","url":{"schema":"http","addr":"slmplswap.to/","fqdn":"slmplswap.to","domain":"slmplswap.to","tld":"to"},"ip":{"addr":"172.67.163.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"title":"Share Secrets Securely","dom":{"size":290685,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39514)","md5":"cf774e75dd8d35d001fba8ecad282571","sha1":"e9cc6825546d76b45138dd546a9c642c959c5da9","sha256":"45bbbe564bb3d13a5e661a55386cf42740a7af9b8efe82d696c34f6c5c6291cc","sha512":"bd6d7d34ac05bab4348fb0fe54e7cca43f3462531af0bc826bc25e5b2b9c8f3eb0037c48d2c5c8b922255419cc50392f0b3a43b03d90be71a2ffa9627d477f4d","ssdeep":"3072:3mjYLyaKNKomljKA/zY1yJucOuLHCWfflf2:3mVySCCn","tlshash":"2f54d86392b9166d584f7b7aeb61b390532fe3af71a947d4582d82701383d8cf137980","dom_hash":"domhash9ade991a29e7c9332fd121fe4b3a767f","first_seen":"2026-08-28T13:47:02.02284Z","last_seen":"2026-08-28T13:47:02.02284Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"slmplswap.to/","fqdn":"slmplswap.to","domain":"slmplswap.to","tld":"to"},"ip":{"addr":"172.67.163.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:46:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"slmplswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"slmplswap.to","ip":{"addr":"104.21.57.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1263,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"onetimesecret.com-secret.to","ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:46:55.59269Z","last_seen":"2026-08-28T13:46:55.59269Z","alert_count":40,"request_count":40,"received_data":1549251,"sent_data":20182,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cd47d10e6aa50433f9a92c606604402","sha1":"999cc6c88cd8fbf93b866c5ac1c9e80cc7d34186","sha256":"c4a447814c51f1a81a955073c1eff00850ffd341f8acc23eb746958b172bc344","sha512":"a5ba367a6b8faab8e0821ee70d8c4106809ad3c615d8838c76f8abaf7f1de15dd0f7dd58d10ade59588fd45eb2b20b3ac1c1c547fcc2dda2fa9a066f74cfceb1","ssdeep":"","tlshash":"9c11105a3116a077c4bd21b368bf8d88b1725544ec43f5c0a81eda822df4d23921bcf0","size":1000,"data":"","first_seen":"2026-08-28T13:47:02.106822Z","last_seen":"2026-08-28T13:47:02.106822Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa12ffd853f723322bbb247b85bcf052","sha1":"61ea3007c20c663f31b422712f50aaa1a883d06b","sha256":"9cdfcb7fee991ffcd75344198595e513b59ff2302e42fbfe26648823006f169d","sha512":"6e1fd6e490b8f0cd32b8fdd873256f79d025f1116f2bc900307c820091b1658dda0ec41a08d48483c773b1ca761fb539d4f599fa2e40c29502582e982a454c11","ssdeep":"","tlshash":"1e2120c675e3b0f5c5a8a0bbd41fe54033364e4a918ad5a6d384e1d418b7c27ec2273d","size":1266,"data":"","first_seen":"2026-08-28T13:47:02.108869Z","last_seen":"2026-08-28T13:47:02.108869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5925c751b8fdd0a17b097308d5a31979","sha1":"0366510993463f8f1eb098f4bcaa6b4e7ccff1bf","sha256":"1256f43f705a6b69266231b52b993cc91abfc0de6cf0467ea68920e6e5c051be","sha512":"75864b01a6144b257b8935410930356549288f6b664d828dc580d8ba928d2ca077c10ea7c7df41b849094279f160dfc3c1ee5b6f5ffa2cddf3f0bf9f59728c17","ssdeep":"","tlshash":"a3e0f8c230503432262fa3f412af3f0ce39302216e1488c86440698caf22a53cb033e8","size":379,"data":"","first_seen":"2026-08-28T13:47:02.110372Z","last_seen":"2026-08-28T13:47:02.110372Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58f35c8892e4a0007357bb7595d89156","sha1":"234da82db4ebe75f05e72c7fdb79bfeff3b43947","sha256":"5f33103f2ec096b04087380e3634b4bb6b55e8accc6ce4af1bd3a71026a2a6b2","sha512":"184984c31ce42c33e247de22ba0295acb45d72c3efd163d198af214abcb558525d193ae2dcd52634ef156440e923879987fcccd3e8b9d90c6f98c255cc6b568a","ssdeep":"","tlshash":"9621c1351a4b08200597048d7f175648773f23137a58f918f95d93482f60e9d8db17da","size":1204,"data":"","first_seen":"2026-08-28T13:47:02.111951Z","last_seen":"2026-08-28T13:47:02.111951Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba0f4e77cb3d1968e8bb09e81cc6345e","sha1":"c3dabda4cfc7ed18627ba989f8ae8766b1ce4933","sha256":"7885d6bc09b192bdb9d4b2599239e210ae4b70f1773646a96c97a9a21c184487","sha512":"57baf1a1c836348e36fb6c38e649c142601110dd231faea9bc2a5c9c653c4b014dc4d02b3bbd7dad06a67eb2418bde568ca6f698086f9ce179718b5b1c56261a","ssdeep":"","tlshash":"f3c02bd612f36130f3ab40c7838f31c300207016027840d351014c70101c4494594e30","size":130,"data":"","first_seen":"2023-07-23T05:20:44Z","last_seen":"2026-08-29T18:14:08.040961Z","times_seen":11122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74f107b814ab5cbeac7f24eb7bb55d53","sha1":"83be025b0829ed2c457f779d893cd2e748d2cbc9","sha256":"49a0a415f3ebb887535d3f3ff7b240ad0986c622402f6a386c10ef4a0279cb74","sha512":"fe8d5620766cef8e882e137cfabf83a6886b4e7e1f6f3d3791a0058547dca4c2d31d0a04ae24c52fa9240cf0c49af5d6bce6c3a03efd5df02acb6ddcbcbae877","ssdeep":"96:eS1LHVjZNzsXca+q0lxIXm6hUOuduj8/EAZsRMvR:eS1HZZvaLaSX8gj8/EssRMvR","tlshash":"d791c6b502211b722edd51999e356ec3c6b5143898db48bd380e5df31358d83857ebf8","size":4403,"data":"","first_seen":"2026-05-07T18:15:25.42073Z","last_seen":"2026-08-29T18:14:08.040391Z","times_seen":1479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3970c71479664fbb588f15ca2a4d270e","sha1":"6bb0e5ec218d19979197e0a1bad026f618a3ce1b","sha256":"9e8a6147160b1740a0f481a8b43728f036058bf8b9bf92f800399b008f308c80","sha512":"dd498f6f60dbc11e269ada18120d6e34e84ca8cc70c6b662e8dd4cbb7634c54fe1214bfa07fffd2f932d00d186a5af82c7b2036443954873d99ed952093c5987","ssdeep":"","tlshash":"47f0550ad8ad0530814710ee6339b210b0ba928ba62ddd013d8e4e684f6880c07689c8","size":476,"data":"","first_seen":"2026-08-28T13:47:02.116468Z","last_seen":"2026-08-28T13:47:02.116468Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"091fcea2ce8db1aa7fe44a4051e96b41","sha1":"4d1b368bcbddf456742d0abacd23ee510e609158","sha256":"433585662f852c8c76ded9e6f52054e1a120c78c7c0ecb8048fd3b99faa897f7","sha512":"765886ace161a524d53d770197f9f99de2c574df18129c8f32c3d4805f4680e2bd3c538527c6ed7e053b462fd1482e2eae75fcdf545bbeb795feff24d9c77d7f","ssdeep":"","tlshash":"14c02b9512f3e130f2a741c5c3cf32430000725602f841d351055c70401cc8a55a4f30","size":130,"data":"","first_seen":"2023-07-22T04:09:49Z","last_seen":"2026-08-29T18:14:08.039688Z","times_seen":16795,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/Homepage.CRHigtoQ.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"083b59eae3489b541f9e52fd60cbad99","sha1":"f856c59f5e49b21589a0ccd15c2fcfa65fc775a3","sha256":"0393b512ca72545348ed57760cb17c96bfad1e805a9bbacb61eef6702ab5d152","sha512":"55f588019952a7e331fb6ca5109cf8beca337953b169aff768f19c060671655a172e23a9a0184099554a4bad7994e0886003e1974fdd186815aaa53b1f145e92","ssdeep":"768:zBdk2bqHjsMCgk9G3zdtj5AGJXo1bJ1m8e3jGjuLx5bLZsK57+lBRI9GLx5DhtFb:kj5A2GXEGI9KhtF6rYGArE8UeWhpt4Nv","tlshash":"8023f84e716069bdd1eb487b749eb8086e2d0fa3e243c9d2ea7cc83537658b1d607760","size":46306,"data":"","first_seen":"2026-08-28T13:47:02.098454Z","last_seen":"2026-08-28T13:47:02.098454Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/FooterLinkLists.BGoCJUjn.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"adc68eb4463b98dd1c5e41c81872d4a6","sha1":"b7998b5fdf9756a54b82f4b6803ec45894ed56d3","sha256":"5436c88e0171ee7e0f9adad3ce76af640b40ac2ed07cfd4df57d32a65fc67d92","sha512":"c798d986190f05ac581a4c6714a5b861bfeb52cdb0d9b956d04dfc43eadf29c479d8bc287a1e517481d74286e00393fe54c596ceef0c4e0c7900a6216eed9e89","ssdeep":"","tlshash":"82815196ead40c7fe10957b3b05278742a0c825bca8bcce1d16ac472276eb7db403794","size":4061,"data":"","first_seen":"2026-08-28T13:47:02.029331Z","last_seen":"2026-08-28T13:47:02.029331Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/preload-helper.D7DX-ygP.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fe980627310323ace492dd43a56f991b","sha1":"1bcb42953b7c29bd5b705f5c52f2c1b6916633f5","sha256":"6ed4662412fe0f33444b2b0311b19998c9078e83438b64ef160f9a7c36d825db","sha512":"e1de458de90b0a9898655217df31abbdb46c748251cf51096aefa92148ae8ba1e7b921098d5cf93b82bb218d0e346f7098f9058904ecd976a343b46ee6da4ceb","ssdeep":"","tlshash":"3b31748633f0a232025a1bacf0b96603fe941853744d4a81902d8aa4bb6aecad164f07","size":1669,"data":"","first_seen":"2026-08-28T13:47:02.039681Z","last_seen":"2026-08-28T13:47:02.039681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/i18n-en.D8AKcyza.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"beff941314acbbe34b8ed7ced7116109","sha1":"eeda2a7220c2ccc6d57987c360c348b766319d68","sha256":"80ca587c8386609b95bd915d415fb41a64253658c165758f92748af3076d2688","sha512":"e717eebeb8d106755a094de6c3c2982e18f3b425245f7e373581464973a872da0d5effa0b7356b20ce1f2756afd9797eedb8861332d80bc5252892a9a2662128","ssdeep":"192:zIKQJiBpNIxFzyKsvqHiLp2hcayikKcBOtABcJYczvyktm96cbF/iQDWQzJkb0GH:zIKQEANit2hSKcdBcB1ogGOjYjt+V","tlshash":"8d72b55bb6601e7687c703dbb9d6b649b6b8450627c04899cc9e810c1398fdfe33b1e9","size":16858,"data":"","first_seen":"2026-08-28T13:47:02.095802Z","last_seen":"2026-08-28T13:47:02.095802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/vue-vendor.CqizvWD4.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"69edbf904c494e68e586fce75c6d4306","sha1":"d7a85ae8d3a2f439e4c041757f253c9af9183aac","sha256":"1aaba03ccd52bfdc65f41dba368cc5ddc338f217cea04ffdf80a94e64733303e","sha512":"716ceae3cfebe9e402ea57785ec8514c0cf71fffdd09f3b2ba3ab1018991f967ea06cce7da0c35527e48e5571850e706ee718a0f454d0aa18dd78b66286b461b","ssdeep":"3072:wRktsXorCt85m7dmQ356QAXTW0O5QmlojdHvwjeD:wPXorZKIU6QAXTW0NmlojdHIjeD","tlshash":"6be329e93097b46293a60ae650b71406f33d2915380d98d4f1adee8b3e3384542b7f6d","size":143387,"data":"","first_seen":"2026-08-28T13:47:02.062738Z","last_seen":"2026-08-28T13:47:02.062738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=#astro-retry=1787924786171","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"542b0f6b7801def0c1b0d918bfb9daa7","sha1":"5ad03b829b552e283bda920a87a861590c3e10c1","sha256":"54a4e13e3aafa841888e735b3027f8c967992a63884963d363e119b1d6b80a6a","sha512":"c229e87324496c9dcbc2647597cb661e8c1ae2f916a697124078eb5cb6bee71b950c1c597bd731eaf92cfa26b14841fd85e45fde91011cf81dd0dbe214a60232","ssdeep":"","tlshash":"5881c88de5c49639b1570257f9417c11700ec2ebe7af7d86f67cca093386828c1c974a","size":3869,"data":"","first_seen":"2026-08-28T13:47:02.080214Z","last_seen":"2026-08-28T13:47:02.080214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/FooterSignOff.BhN048bN.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3fd96a368cc6782feaf5f9fd4c7dcfd5","sha1":"2c25a43d89ffa6b3d9be250546ab85c3b574ca28","sha256":"6c65df955863a7b4915c72eb09436c0ef230cdc46f1b490b0546b8887d0ac2f8","sha512":"224e6bf70c4b2b605948f26bb95b2f7923d6b40f72cb6981a4bb7aceea657d6d79c89e153c70718faf3a6381959793e6e86e83417f35bc9c9ed7b5e6ca749b29","ssdeep":"","tlshash":"3831858fb9d0de7f49df02ace8673080e5183457d78dce80907d0b2633703aa9505746","size":1752,"data":"","first_seen":"2026-08-28T13:47:02.082048Z","last_seen":"2026-08-28T13:47:02.082048Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/OIcon.CfxBy5d5.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e3a44c471fce3e7b142c3af1dff009e3","sha1":"181af8144c2f1cf6b1967c5f449a2f1335aa8db9","sha256":"2819f27c41573320443714cc43ff2c858536f3c53621dba0e97d2c589df7bca0","sha512":"7bda41733e852b2aa441cf036556235339925691c1ca59b587b9708fd38fc6a3961a2e1ef522e3ca6304d7e7263c1246f9c456197be25cbf96a551a7ee9dac2b","ssdeep":"","tlshash":"7721758d6ae085bad14a57ccc9035866265915f7b2dc0f8bb0b4c73d1b22ae4a51ca13","size":1280,"data":"","first_seen":"2026-08-28T13:47:02.049245Z","last_seen":"2026-08-28T13:47:02.049245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/utils.DuLL4NDx.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a42d2cb4a67e8d188581f8adafa5fe8","sha1":"87050efa2e7d3f829d01b3385be0554b56388c3c","sha256":"2740ef3925bd455d316376ff215bc4581f0755e3ede576406dfb779d0677f222","sha512":"36b2eeb25a9a9fdd79b3067b3803da9d0e12aeda82b8cffeedc40ac931db333032566f3d93bc25c856eca142949e208e9f8691cbd59af742f0a727b2515a1a33","ssdeep":"","tlshash":"90110089b4d36d4f827e03a8e99f0000a40c1887308e4f80f0ae697573767bf9226b5a","size":1098,"data":"","first_seen":"2026-08-28T13:47:02.043873Z","last_seen":"2026-08-28T13:47:02.043873Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/i18n-en.D8AKcyza.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"beff941314acbbe34b8ed7ced7116109","sha1":"eeda2a7220c2ccc6d57987c360c348b766319d68","sha256":"80ca587c8386609b95bd915d415fb41a64253658c165758f92748af3076d2688","sha512":"e717eebeb8d106755a094de6c3c2982e18f3b425245f7e373581464973a872da0d5effa0b7356b20ce1f2756afd9797eedb8861332d80bc5252892a9a2662128","ssdeep":"192:zIKQJiBpNIxFzyKsvqHiLp2hcayikKcBOtABcJYczvyktm96cbF/iQDWQzJkb0GH:zIKQEANit2hSKcdBcB1ogGOjYjt+V","tlshash":"8d72b55bb6601e7687c703dbb9d6b649b6b8450627c04899cc9e810c1398fdfe33b1e9","size":16858,"data":"","first_seen":"2026-08-28T13:47:02.095802Z","last_seen":"2026-08-28T13:47:02.095802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"42153f6c8831676d4010cc46128f26f5","sha1":"dc9050ff61719f72e352a7cca3579e04cb5992ea","sha256":"7dff56023c435aa8fcc35e8bdc743a25364965760f62e476b1b957d0ce1c37c0","sha512":"8dd6e2eb73868cc594b58ad509e7ee2288574ab8ea6402b5e9d40b96050b77a0126dfc0489c8abca9865af16183e32ab241f8e85655d89526f7f99445b1c444d","ssdeep":"","tlshash":"6251c94a77d0847c815f05ddf41b3c0b91597f60c28ac56fe9bc9276273587c9b86340","size":3038,"data":"","first_seen":"2026-08-28T13:47:02.065164Z","last_seen":"2026-08-28T13:47:02.065164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/client.PGqbyWij.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"946a336060afbe4c370391cccf8dadb4","sha1":"ba15c45ce6930bb54619b2fead0116488d527c9a","sha256":"744311ae234de9b8562c299be1b18d71d88bcd8f9a4d72368c4c5bc6d083d029","sha512":"a930df5e12ef793434ed4d107a2fc0c9fcfd1e961ae33e840c24d1a7e96f7173b4e1b0cdfe1b3b1acb9f55ba0c3f7cc57caaa808a6dad2f0f5859bf2ac372034","ssdeep":"","tlshash":"0731b769f9e09f7380ec0dacd826340178593016b05ada94f3fe4b3b13e5955e11cf65","size":1801,"data":"","first_seen":"2026-08-28T13:47:02.073918Z","last_seen":"2026-08-28T13:47:02.073918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/useJurisdiction.B0-1Pp-7.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"93eeb544dc99205a72f5acf1336e3eac","sha1":"8d3c383a18cc38ddba3878a1b8b9d880d47747fd","sha256":"96dc18666af8346aef249618707252cc76e955d2dd0214a865c33cb3e19d7ea7","sha512":"d3de23b3178ad5aa89b9051889b3464757387b79f21ecab925163b53cc6b1af3f0865909c175f836f95c9827e1f455f23ca4795ff36a565a0dcf985887a70622","ssdeep":"96:6GPvJEla5WjWKG3QkkxXJk1l8piSrIayrwjt6h3wjt1XnzXRg:x3JElIWyKNJ9piSrIayrwjtywjtg","tlshash":"fcb195e6b38034b483ff426eb59a90a4617c8e25654dd1c0bd8c8f272d71a8554723bf","size":5200,"data":"","first_seen":"2026-08-28T13:47:02.078224Z","last_seen":"2026-08-28T13:47:02.078224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/App._ih9KJFl.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"25277b87bd5788de88c6d4e6506e8ada","sha1":"807408609ed529381569a96689d420ac7c2944e2","sha256":"44906d23b23ae86fe2202fd233d2f85f49ade6e766f6dcd215fd921c889be720","sha512":"158dbc3eb3cde8acd6de07813fd88d6b4ce92fe6f3d9f24aaca8b7a18c85381b5629068020f2f4204cfde88c67a655a3cd539a7291e6aa48170f433bd453160f","ssdeep":"","tlshash":"2a01154959f1120780a6056cf42771067964503612ed8f82717a0b3d2beaadfe539b47","size":725,"data":"","first_seen":"2026-08-28T13:47:02.061269Z","last_seen":"2026-08-28T13:47:02.061269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"542b0f6b7801def0c1b0d918bfb9daa7","sha1":"5ad03b829b552e283bda920a87a861590c3e10c1","sha256":"54a4e13e3aafa841888e735b3027f8c967992a63884963d363e119b1d6b80a6a","sha512":"c229e87324496c9dcbc2647597cb661e8c1ae2f916a697124078eb5cb6bee71b950c1c597bd731eaf92cfa26b14841fd85e45fde91011cf81dd0dbe214a60232","ssdeep":"","tlshash":"5881c88de5c49639b1570257f9417c11700ec2ebe7af7d86f67cca093386828c1c974a","size":3869,"data":"","first_seen":"2026-08-28T13:47:02.080214Z","last_seen":"2026-08-28T13:47:02.080214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/preload-helper.D7DX-ygP.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe980627310323ace492dd43a56f991b","sha1":"1bcb42953b7c29bd5b705f5c52f2c1b6916633f5","sha256":"6ed4662412fe0f33444b2b0311b19998c9078e83438b64ef160f9a7c36d825db","sha512":"e1de458de90b0a9898655217df31abbdb46c748251cf51096aefa92148ae8ba1e7b921098d5cf93b82bb218d0e346f7098f9058904ecd976a343b46ee6da4ceb","ssdeep":"","tlshash":"3b31748633f0a232025a1bacf0b96603fe941853744d4a81902d8aa4bb6aecad164f07","size":1669,"data":"","first_seen":"2026-08-28T13:47:02.039681Z","last_seen":"2026-08-28T13:47:02.039681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/App._ih9KJFl.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25277b87bd5788de88c6d4e6506e8ada","sha1":"807408609ed529381569a96689d420ac7c2944e2","sha256":"44906d23b23ae86fe2202fd233d2f85f49ade6e766f6dcd215fd921c889be720","sha512":"158dbc3eb3cde8acd6de07813fd88d6b4ce92fe6f3d9f24aaca8b7a18c85381b5629068020f2f4204cfde88c67a655a3cd539a7291e6aa48170f433bd453160f","ssdeep":"","tlshash":"2a01154959f1120780a6056cf42771067964503612ed8f82717a0b3d2beaadfe539b47","size":725,"data":"","first_seen":"2026-08-28T13:47:02.061269Z","last_seen":"2026-08-28T13:47:02.061269Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingWatermark.CxaB0gop.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"02f948f82df893f02db206bf7ed99768","sha1":"bcf92d46144ffb7ad7759730d8c6f31b651bfe32","sha256":"c8198e9bb190b4c4376af2be997cfaa08820a126981ec8960b79c565f6bc5e74","sha512":"00381d68b384f030dc6141bc30aaa3a3a10c36cfc379bc745bd11aec882010e209d93b6bdc3c75484cbe77b37367be9cecd22d18924297bf363bf401efb4a23c","ssdeep":"","tlshash":"0641f85c0bd4e42cb13606aafa776909711891ab938dcec9d17c163b23104be432e306","size":2022,"data":"","first_seen":"2026-08-28T13:47:02.093559Z","last_seen":"2026-08-28T13:47:02.093559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/index.Dy8DMq1Y.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94b81bb52764115910539d782ffe3de0","sha1":"e0fbde332fbe4784ca38df8212774aa3eadb4695","sha256":"80be4062453e77a7666c7d1a56811249a11e4d354288bb66b01cbf73bd93a11e","sha512":"d9de1a5a44f27486758ca3bf7d1e86de2125a7b9f8ba1b4ec8a739423bcec7a91a16541cc7810c503db8eeea2d47d33e9fe0aa2104be0c0160aebc44cfe3fd7d","ssdeep":"","tlshash":"1831436aa4b1496e907619dce90f3001a27402ad13ce5ee0b06f637913e57ccb6e9a1b","size":1757,"data":"","first_seen":"2026-08-28T13:47:02.087745Z","last_seen":"2026-08-28T13:47:02.087745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/_plugin-vue_export-helper.i8N4XAj9.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"10d8fc904731fb7a4be492fffc44d3f2","sha1":"8a904a2252484bc892abe990ca52397279ff991b","sha256":"da44256b9b2500b0717b005bb6b156a5e7ac471bdb374b299535822086640db7","sha512":"3935a159dd67aca11600d12c65dfc988efbb329f01494406816939057b119dec1a165a7822c4d9320cf68692a083360932a59e8f2a60a6a423fb7a639451c973","ssdeep":"","tlshash":"05f0c9c8caf0404982ba376cea1e6080bd44003b25dc8f91816c8b3ba7959deab5074b","size":506,"data":"","first_seen":"2026-08-28T13:47:02.033252Z","last_seen":"2026-08-28T13:47:02.033252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/index.Dy8DMq1Y.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"94b81bb52764115910539d782ffe3de0","sha1":"e0fbde332fbe4784ca38df8212774aa3eadb4695","sha256":"80be4062453e77a7666c7d1a56811249a11e4d354288bb66b01cbf73bd93a11e","sha512":"d9de1a5a44f27486758ca3bf7d1e86de2125a7b9f8ba1b4ec8a739423bcec7a91a16541cc7810c503db8eeea2d47d33e9fe0aa2104be0c0160aebc44cfe3fd7d","ssdeep":"","tlshash":"1831436aa4b1496e907619dce90f3001a27402ad13ce5ee0b06f637913e57ccb6e9a1b","size":1757,"data":"","first_seen":"2026-08-28T13:47:02.087745Z","last_seen":"2026-08-28T13:47:02.087745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/vue-vendor.CqizvWD4.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69edbf904c494e68e586fce75c6d4306","sha1":"d7a85ae8d3a2f439e4c041757f253c9af9183aac","sha256":"1aaba03ccd52bfdc65f41dba368cc5ddc338f217cea04ffdf80a94e64733303e","sha512":"716ceae3cfebe9e402ea57785ec8514c0cf71fffdd09f3b2ba3ab1018991f967ea06cce7da0c35527e48e5571850e706ee718a0f454d0aa18dd78b66286b461b","ssdeep":"3072:wRktsXorCt85m7dmQ356QAXTW0O5QmlojdHvwjeD:wPXorZKIU6QAXTW0NmlojdHIjeD","tlshash":"6be329e93097b46293a60ae650b71406f33d2915380d98d4f1adee8b3e3384542b7f6d","size":143387,"data":"","first_seen":"2026-08-28T13:47:02.062738Z","last_seen":"2026-08-28T13:47:02.062738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=#astro-retry=1787924786053","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"42153f6c8831676d4010cc46128f26f5","sha1":"dc9050ff61719f72e352a7cca3579e04cb5992ea","sha256":"7dff56023c435aa8fcc35e8bdc743a25364965760f62e476b1b957d0ce1c37c0","sha512":"8dd6e2eb73868cc594b58ad509e7ee2288574ab8ea6402b5e9d40b96050b77a0126dfc0489c8abca9865af16183e32ab241f8e85655d89526f7f99445b1c444d","ssdeep":"","tlshash":"6251c94a77d0847c815f05ddf41b3c0b91597f60c28ac56fe9bc9276273587c9b86340","size":3038,"data":"","first_seen":"2026-08-28T13:47:02.065164Z","last_seen":"2026-08-28T13:47:02.065164Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingWatermark.CxaB0gop.js?_cb=#astro-retry=1787924786053","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"02f948f82df893f02db206bf7ed99768","sha1":"bcf92d46144ffb7ad7759730d8c6f31b651bfe32","sha256":"c8198e9bb190b4c4376af2be997cfaa08820a126981ec8960b79c565f6bc5e74","sha512":"00381d68b384f030dc6141bc30aaa3a3a10c36cfc379bc745bd11aec882010e209d93b6bdc3c75484cbe77b37367be9cecd22d18924297bf363bf401efb4a23c","ssdeep":"","tlshash":"0641f85c0bd4e42cb13606aafa776909711891ab938dcec9d17c163b23104be432e306","size":2022,"data":"","first_seen":"2026-08-28T13:47:02.093559Z","last_seen":"2026-08-28T13:47:02.093559Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/page.BYIF2uXK.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdc7f8c2b8c0bb9e237a2da6cb3b0e67","sha1":"ccccfe6dfeb39dd6ef8145891a55939d69ade27f","sha256":"a47ccc26a4851a625051eaa9f12114ecbfa1fe55a0b362e7cf0f6f7e3a6ebf22","sha512":"ab7335533e15bc352141846169d0a36f0e44ef8737eaf6399d3e793e7a3522816adb9552918f604238871a272018a0797f876b580a451177bce83bb57e9786b3","ssdeep":"","tlshash":"2ae0abc8cbf0060a41162b7de82e6100ba580023c2cd4f61a27c877b33a9f999d09387","size":416,"data":"","first_seen":"2026-08-28T13:47:02.103283Z","last_seen":"2026-08-28T13:47:02.103283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to detect jurisdiction:error loading dynamically imported module: https://onetimesecret.com-secret.to/dist/assets/countryToJurisdiction.CJfJZo-p.js","filename":"https://onetimesecret.com-secret.to/dist/assets/useJurisdiction.B0-1Pp-7.js","line_number":1,"column_number":4096},{"level":"error","text":"[astro-island] Error hydrating /dist/assets/StagingBanner.VYaacLpm.js?_cb=error loading dynamically imported module: https://onetimesecret.com-secret.to/dist/assets/domains.CxvQqStM.js","filename":"https://onetimesecret.com-secret.to/","line_number":35,"column_number":3817},{"level":"error","text":"[astro-island] Error hydrating /dist/assets/StagingWatermark.CxaB0gop.js?_cb=error loading dynamically imported module: https://onetimesecret.com-secret.to/dist/assets/domains.CxvQqStM.js","filename":"https://onetimesecret.com-secret.to/","line_number":35,"column_number":3817},{"level":"error","text":"[astro-island] Error hydrating /dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=error loading dynamically imported module: https://onetimesecret.com-secret.to/dist/assets/headlessui.SyVpAGJ3.js","filename":"https://onetimesecret.com-secret.to/","line_number":35,"column_number":3817}]},"http":[{"url":{"schema":"https","addr":"slmplswap.to/","fqdn":"slmplswap.to","domain":"slmplswap.to","tld":"to"},"ip":{"addr":"104.21.57.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:46:17.331Z","timestamp":1787924777331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"slmplswap.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 09:37:28 GMT","end":"Sun, 18 Oct 2026 10:35:57 GMT"},"fingerprint":{"sha1":"4F:B7:A6:26:9A:8A:C6:51:89:A4:B7:13:9C:79:1C:E7:70:9E:D8:84","sha256":"01:7D:FB:AC:D4:DD:37:F9:F6:62:42:2B:89:FC:F5:45:1F:0F:59:F7:B6:1E:23:D7:00:61:1F:17:58:4B:E9:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: slmplswap.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nset-cookie: PHPSESSID=n7d5m6f6v2clopmign5tu6ebl1; path=/\ne3b0c4_42=kie1tm3q21eci; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly\n_token=kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly\n_subid=18uumd0.2a.1678; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nlocation: https://onetimesecret.com-secret.to/?_subid=18uumd0.2a.1678\u0026_token=kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMqSSusCdUDqK2gS8xrMV2CMvd0Z6%2BhtW09GER7NXc7k9CtHi3bATcbOtx9GyiP1Hi0tGDTvillEjNm0U%2BzLNGQdvY0h7%2Fe6%2BEmf37Y270wkoaDQ8kFbAnv9Wy9QT5g%3D\"}]}\r\ncf-ray: a323c2e2ba354e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"n7d5m6f6v2clopmign5tu6ebl1","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=n7d5m6f6v2clopmign5tu6ebl1; path=/"},{"name":"e3b0c4_42","value":"kie1tm3q21eci","quoted":false,"path":"/","domain":".slmplswap.to","expires":"2026-08-29T13:46:17Z","raw_expires":"Sat, 29 Aug 2026 13:46:17 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"e3b0c4_42=kie1tm3q21eci; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly"},{"name":"_token","value":"kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5","quoted":false,"path":"/","domain":".slmplswap.to","expires":"2026-08-29T13:46:17Z","raw_expires":"Sat, 29 Aug 2026 13:46:17 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_token=kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly"},{"name":"_subid","value":"18uumd0.2a.1678","quoted":false,"path":"/","domain":".slmplswap.to","expires":"2026-08-29T13:46:17Z","raw_expires":"Sat, 29 Aug 2026 13:46:17 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"_subid=18uumd0.2a.1678; expires=Sat, 29 Aug 2026 13:46:17 GMT; Max-Age=86400; path=/; domain=.slmplswap.to; HttpOnly"}],"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T18:22:35.648782Z","times_seen":18171110,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":33,"connect":23,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"slmplswap.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/FooterLinkLists.BGoCJUjn.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.838Z","timestamp":1787924784838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/FooterLinkLists.BGoCJUjn.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:10 GMT\r\netag: \"6a79e4e6-548\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rjt3jwYM89Me%2FNL6KK3vdLdnm8msNzF2offxYL4IJoGoqeujUeFyuqsxuPvXycxi5dlaxxGLTRq0E3MzyzxcKl7t0SWSDvAdem%2FSjR6MEzo3D7FwUye%2FbEqoIQxbuiHjtMt9UKnEBG481FF0Deo%3D\"}]}\r\ncf-ray: a323c3114c4856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1352\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":2296,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"adc68eb4463b98dd1c5e41c81872d4a6","sha1":"b7998b5fdf9756a54b82f4b6803ec45894ed56d3","sha256":"5436c88e0171ee7e0f9adad3ce76af640b40ac2ed07cfd4df57d32a65fc67d92","sha512":"c798d986190f05ac581a4c6714a5b861bfeb52cdb0d9b956d04dfc43eadf29c479d8bc287a1e517481d74286e00393fe54c596ceef0c4e0c7900a6216eed9e89","ssdeep":"","tlshash":"82815196ead40c7fe10957b3b05278742a0c825bca8bcce1d16ac472276eb7db403794","first_seen":"2026-08-28T13:47:02.029331Z","last_seen":"2026-08-28T13:47:02.029331Z","times_seen":1,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/_plugin-vue_export-helper.i8N4XAj9.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.958Z","timestamp":1787924784958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/_plugin-vue_export-helper.i8N4XAj9.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:08 GMT\r\netag: \"6a79e4e4-177\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLBLv2FXz287ylz%2B2aGbayo6LzfPZW73e1QSi4PaiH72n%2BpJMEnDa3Pvey4tGvVsAj%2Fmk2PDQyXslaxA%2F1HNH6a%2Bu1kEYrPF5fYCJd%2FFHKxsg0n%2FTAJVhFL3069GK%2BlYi%2BIdpSPFynpwGg4MYw4%3D\"}]}\r\ncf-ray: a323c311fc5156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 375\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":506,"size_decoded":1330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (505)","md5":"10d8fc904731fb7a4be492fffc44d3f2","sha1":"8a904a2252484bc892abe990ca52397279ff991b","sha256":"da44256b9b2500b0717b005bb6b156a5e7ac471bdb374b299535822086640db7","sha512":"3935a159dd67aca11600d12c65dfc988efbb329f01494406816939057b119dec1a165a7822c4d9320cf68692a083360932a59e8f2a60a6a423fb7a639451c973","ssdeep":"","tlshash":"05f0c9c8caf0404982ba376cea1e6080bd44003b25dc8f91816c8b3ba7959deab5074b","first_seen":"2026-08-28T13:47:02.033252Z","last_seen":"2026-08-28T13:47:02.033252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/preload-helper.D7DX-ygP.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.961Z","timestamp":1787924784961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/preload-helper.D7DX-ygP.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/client.PGqbyWij.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:08 GMT\r\netag: \"6a79e4e4-3b8\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAOHaApbRJohV8IkcP%2FciZ4VSNK5G53yuqE1JsyOVz97MjpC74t%2FJZqYE19QLDF0evJE%2BE67EuSTVqMNduyilFEy%2BmF4b0MjCIf7TK1jaPOOQjULHNiGZMtCj6LyUdkd2feZMhf94f5A0Z2xDCY%3D\"}]}\r\ncf-ray: a323c3120c5256c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1669,"size_decoded":1899,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"fe980627310323ace492dd43a56f991b","sha1":"1bcb42953b7c29bd5b705f5c52f2c1b6916633f5","sha256":"6ed4662412fe0f33444b2b0311b19998c9078e83438b64ef160f9a7c36d825db","sha512":"e1de458de90b0a9898655217df31abbdb46c748251cf51096aefa92148ae8ba1e7b921098d5cf93b82bb218d0e346f7098f9058904ecd976a343b46ee6da4ceb","ssdeep":"","tlshash":"3b31748633f0a232025a1bacf0b96603fe941853744d4a81902d8aa4bb6aecad164f07","first_seen":"2026-08-28T13:47:02.039681Z","last_seen":"2026-08-28T13:47:02.039681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/utils.DuLL4NDx.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.963Z","timestamp":1787924784963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/utils.DuLL4NDx.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:06 GMT\r\netag: \"6a79e4e2-26b\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08oqakdKIQCjyTiHND8eH%2FDtWGXIaum1JQ5YMtU7RV7b7RRo%2F8OgSpzl4Y4myvNROAhA%2FZF2UCHRsnN4Lp4QnwdXypK%2ByV8l%2Fs1yG7Y27IKoFklZPQCnOBljVU%2B12NC8LtH6e%2F0rgH9ySjleIDE%3D\"}]}\r\ncf-ray: a323c3120c5356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 619\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1098,"size_decoded":1570,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1095)","md5":"2a42d2cb4a67e8d188581f8adafa5fe8","sha1":"87050efa2e7d3f829d01b3385be0554b56388c3c","sha256":"2740ef3925bd455d316376ff215bc4581f0755e3ede576406dfb779d0677f222","sha512":"36b2eeb25a9a9fdd79b3067b3803da9d0e12aeda82b8cffeedc40ac931db333032566f3d93bc25c856eca142949e208e9f8691cbd59af742f0a727b2515a1a33","ssdeep":"","tlshash":"90110089b4d36d4f827e03a8e99f0000a40c1887308e4f80f0ae697573767bf9226b5a","first_seen":"2026-08-28T13:47:02.043873Z","last_seen":"2026-08-28T13:47:02.043873Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/OIcon.CfxBy5d5.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.965Z","timestamp":1787924784965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/OIcon.CfxBy5d5.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:07 GMT\r\netag: \"6a79e4e3-32e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpUg71z4wxj0l1JyAx%2FyJ3DWX3EBhqY76Kf7AXbCEfqZyQhk6ys3X4BhpBeVnCTP5kIr4vdNk4he1gbhX%2F5YdvXySWqgnuUoiAcrvPagtbIZDelQtt3lUg2ezTUm1pFBN1x%2BlHmu0dYQZBdPXG0%3D\"}]}\r\ncf-ray: a323c3120c5456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 814\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1280,"size_decoded":1757,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1279)","md5":"e3a44c471fce3e7b142c3af1dff009e3","sha1":"181af8144c2f1cf6b1967c5f449a2f1335aa8db9","sha256":"2819f27c41573320443714cc43ff2c858536f3c53621dba0e97d2c589df7bca0","sha512":"7bda41733e852b2aa441cf036556235339925691c1ca59b587b9708fd38fc6a3961a2e1ef522e3ca6304d7e7263c1246f9c456197be25cbf96a551a7ee9dac2b","ssdeep":"","tlshash":"7721758d6ae085bad14a57ccc9035866265915f7b2dc0f8bb0b4c73d1b22ae4a51ca13","first_seen":"2026-08-28T13:47:02.049245Z","last_seen":"2026-08-28T13:47:02.049245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:46:24.321Z","timestamp":1787924784321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nx-cache: HIT\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CwezRgJTnvOEXPGTxdNfsP7iZXNQKlnhNeX0zXg3%2BY7Ozq%2F7krCJ5htdkIlddhnKTQJVIsdhmlFScl2YrHwXocLCgOmmcvD2Jmwwy9Ek0WWNUSc08xMfzh0c%2FVp7WpB0oR8B7rTPBkDqfpo1GLs%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a323c30e28ca0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":289369,"size_decoded":61152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39865)","md5":"00583fd69461e68c03b9966e493c1a28","sha1":"595c92dd3192fbdfe5fe022dbddc41ceb4be3585","sha256":"5b56fa3d5368519e010fc52f4f6149036eed12d22042bd47dacfb1895bcdc27a","sha512":"ee6b68b28f13015e8aad7f8ba9f34a3c302687c38c2f9972e111a83ac127c5bd3fba601b6b1fd3217535411eb079ce126ddbdf3c8564b2d36c65cf3a965bb3a0","ssdeep":"3072:6mjYYIUwJaBmljKA/zY1yJucOuLHCWfflf2:6mTySCCn","tlshash":"db54c86392b9166d584f7a7aeb61b390132fe3af71e957d4682d82701383d8cf137980","first_seen":"2026-08-28T13:47:02.052258Z","last_seen":"2026-08-28T13:47:02.052258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/fonts/ZillaSlab-Regular.woff2","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.662Z","timestamp":1787924784662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /fonts/ZillaSlab-Regular.woff2 HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:55 GMT\r\netag: \"6a79f017-11014\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nj5aUoPJ%2BGkRbVwsusNf6s4mgGoGC5gS6ezl6fWQ1zbfCQKwRqkIq5NJyD1g8jtpwfnU3VlpOR6wFayeZAAI1gmejKVb38QFa2lnfIiV%2BmibN470ewZS9CM3Po5UgHpZmWvQeFk4A58FROHyCRg%3D\"}]}\r\ncf-ray: a323c3102c3756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69652,"size_decoded":70497,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 69652, version 1.0","md5":"a6e5f05647218de4fb029ecf8342cddc","sha1":"b41baaef8733f70f6954472f8494ca29accd9c86","sha256":"d4c6ee7e08de94a78ace746beecd21427a0c569890f63beca946bd7fcca0960c","sha512":"e4564beddb05b3e20727887f1cd14c0c182531d4ff3137b14c85466bcb0d2d6fc9a6f67e8bc2a930fc6f1242a16fcffce5bdd84ba3dd2c814923f2ddc07ae616","ssdeep":"1536:SnHPqONYI1YUeiWNAjJ/lt4bf3iKl/v0XBIFQ7ARw0pQgwz1xxCDby/2moVYMT0M:QHPqQYIAiWitol/cX9ANwJLCDbyemoVz","tlshash":"026312460a403f3659d2acfb1e7e74117b080b01456696ae3ede5243707b43cbe7db1a","first_seen":"2025-03-27T11:22:53.763837Z","last_seen":"2026-08-28T13:47:02.05676Z","times_seen":17,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/etc/img/onetime-logo-md.png","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.684Z","timestamp":1787924784684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /etc/img/onetime-logo-md.png HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:55 GMT\r\netag: \"6a79f017-aecb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKSopuVEXyCC3oRk%2FKrmoCuAsE9rnADoP0Tq%2FCrLk5Y45gLrg1SbTLGSQlpHB8rJKcLRxDvfHV9oWRgFbiRg%2BiQEtOXjl4K11TmwkZRC3KK4dmUSTGhSbyffLfbj2RhhM1NN5vYkYpq6qhda%2Fd4%3D\"}]}\r\ncf-ray: a323c3105c3e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44747,"size_decoded":45545,"mime_type":"image/png","magic":"PNG image data, 640 x 640, 8-bit/color RGBA, non-interlaced","md5":"818a7b3f0445e3bff5b749b35333c984","sha1":"f9c061d45a1f5886b5ea9c66c75937bd2a277794","sha256":"cc03e95de79130798ad997f39d18869f21979ec3469caf2bf41fa5d6b11187ab","sha512":"c6623d717632d6279bf4c6abe1311272eaeac28fc838fcd7c0c52517999b910764c1fad0d3ac38ab95ba6c8fa8820ba9d241216ed33e6ed010d716e6eb8ef27a","ssdeep":"768:GL3VDdw+YpKDq2pyU6NEJq6pr4TPUIirOVaJeDH2QWFn:GTxNv0NEI6prqfi0asr2zFn","tlshash":"71139d13c9632633c5637e7d66085f113daa008840fd6e75e9ca7c4a2a0f5e7be9b90c","first_seen":"2025-07-21T09:55:36.436177Z","last_seen":"2026-08-28T13:47:02.059528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/domains.CxvQqStM.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.957Z","timestamp":1787924784957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/domains.CxvQqStM.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MtkA%2BcN%2FrV7Fe5iZAWdk4iQiKs0dYmfBpXTk7YWM%2Byhw3UoIJTmwD8u04fhubsQDfwxHcO1aPZpEmSVLIRt9rE3qRQDPOvU7aum%2B69b5BpHTKG4hBFXBhacYqdbZD8Ns2J%2BD2%2B%2F%2BHtpDiRqv%2Fp4%3D\"}]}\r\no-request-id: bad37b5d-c26d-47ea-985b-c301501022bb\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\ncache-control: private, max-age=31536000, must-revalidate\r\npragma: no-cache\r\ncdn-cache-control: no-store\r\nsurrogate-control: no-store\r\nvary: Accept-Encoding\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c311fc5056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T18:22:35.648782Z","times_seen":18171110,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/App._ih9KJFl.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.233Z","timestamp":1787924785233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /assets/App._ih9KJFl.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 13:12:52 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4sDcSF%2FKiENQTDM2BLmi27xkkDJdWSB0ygrdQ4SjsNzMnHoTNyFF6ojuWYv0TibChkLqawhrpYo%2FoletTlZZRRGbD1ueMdC3qJWLwljPF7MfWBnTiF4W13W5TGlHbswriXQQt8wDillTUD3wzw%3D\"}]}\r\ncf-ray: a323c313bc6a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 457\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":1317,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"25277b87bd5788de88c6d4e6506e8ada","sha1":"807408609ed529381569a96689d420ac7c2944e2","sha256":"44906d23b23ae86fe2202fd233d2f85f49ade6e766f6dcd215fd921c889be720","sha512":"158dbc3eb3cde8acd6de07813fd88d6b4ce92fe6f3d9f24aaca8b7a18c85381b5629068020f2f4204cfde88c67a655a3cd539a7291e6aa48170f433bd453160f","ssdeep":"","tlshash":"2a01154959f1120780a6056cf42771067964503612ed8f82717a0b3d2beaadfe539b47","first_seen":"2026-08-28T13:47:02.061269Z","last_seen":"2026-08-28T13:47:02.061269Z","times_seen":1,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/vue-vendor.CqizvWD4.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.240Z","timestamp":1787924785240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /assets/vue-vendor.CqizvWD4.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2FBg53bKig326XQFdHhHNHNPMtHOEcA58kxfVkm1Trg67kUGiyBMDOe6C5O92ZEGB%2FiOsHO5o3kt6PnMa8qrX5J5UXEIXMWdE7lwMm2hYcT8L7OIl5HScNfEE4OYXH4ayVGkMhIReLHP72p%2FY6A%3D\"}]}\r\nlast-modified: Mon, 10 Aug 2026 14:10:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\npriority: u=1,i=?0\r\nage: 2012\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a79dbdc-2301b\"\r\ncf-ray: a323c313cc7156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143387,"size_decoded":56229,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34454)","md5":"69edbf904c494e68e586fce75c6d4306","sha1":"d7a85ae8d3a2f439e4c041757f253c9af9183aac","sha256":"1aaba03ccd52bfdc65f41dba368cc5ddc338f217cea04ffdf80a94e64733303e","sha512":"716ceae3cfebe9e402ea57785ec8514c0cf71fffdd09f3b2ba3ab1018991f967ea06cce7da0c35527e48e5571850e706ee718a0f454d0aa18dd78b66286b461b","ssdeep":"3072:wRktsXorCt85m7dmQ356QAXTW0O5QmlojdHvwjeD:wPXorZKIU6QAXTW0NmlojdHIjeD","tlshash":"6be329e93097b46293a60ae650b71406f33d2915380d98d4f1adee8b3e3384542b7f6d","first_seen":"2026-08-28T13:47:02.062738Z","last_seen":"2026-08-28T13:47:02.062738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=#astro-retry=1787924786053","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:26.055Z","timestamp":1787924786055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/StagingBanner.VYaacLpm.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:26 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:11 GMT\r\netag: \"6a79e4e7-636\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2013\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIG1XCCIbt%2FFMBwf0FY9wfsXqlpsbd7cs0TlN1pvnWCnLXu%2FXgekYZPXSaVRpRwNlNXNn18Z8U3BQbW1j3%2Bgfodrbe4xzg%2Bozb7P76Ezk5fLMiyimCHUHIMH79NYWzsztPJWAggqPfpJ2uRy8xk%3D\"}]}\r\ncf-ray: a323c318dcf056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3038,"size_decoded":2536,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3037)","md5":"42153f6c8831676d4010cc46128f26f5","sha1":"dc9050ff61719f72e352a7cca3579e04cb5992ea","sha256":"7dff56023c435aa8fcc35e8bdc743a25364965760f62e476b1b957d0ce1c37c0","sha512":"8dd6e2eb73868cc594b58ad509e7ee2288574ab8ea6402b5e9d40b96050b77a0126dfc0489c8abca9865af16183e32ab241f8e85655d89526f7f99445b1c444d","ssdeep":"","tlshash":"6251c94a77d0847c815f05ddf41b3c0b91597f60c28ac56fe9bc9276273587c9b86340","first_seen":"2026-08-28T13:47:02.065164Z","last_seen":"2026-08-28T13:47:02.065164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/?_subid=18uumd0.2a.1678\u0026_token=kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:46:17.726Z","timestamp":1787924777726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /?_subid=18uumd0.2a.1678\u0026_token=kie1tm3q21eci.1788011177.1.4bd7b3ac4f3c8a35aa2cf994b9eb54a5 HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: text/html\r\nlocation: https://onetimesecret.com-secret.to/\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OwkY0IVJsG7vqelt13n99%2FtrXx4KdbuP9w3T4W%2FnQkseRoKI3KYxgyZNBuN3S%2Bi1NeKvngG0APEwaVMc3b5Tw5snFD%2BzkygXicHX2eRJJx5uyJYlk3KyT70pvEabeqa7M31ol9NRZTfcifoFh%2Fc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a323c30d3d620883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T18:22:35.648782Z","times_seen":18171110,"resource_available":true,"data":null}},"time_used":6587,"timings":{"blocked":-1,"dns":30,"connect":1,"send":0,"wait":120,"receive":0,"ssl":6435},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/fonts/ZillaSlab-Bold.woff2","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.664Z","timestamp":1787924784664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /fonts/ZillaSlab-Bold.woff2 HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:56 GMT\r\netag: \"6a79f018-10e9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YYz2ZhujWNc14DVcF3ak6%2Fxo%2Fe%2F6FmdSi9J69r3HUJA1SoHjf8pvVXGgP%2BVviwqtT2NYT%2FcPTdOknoF9%2FQaU9aJxfFggSi2Maa3lLaqAOsCNwvPR7yISmiL4%2BYjnyntc9EfkPEq6VzqRub0YbrE%3D\"}]}\r\ncf-ray: a323c3102c3856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69276,"size_decoded":70131,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 69276, version 1.0","md5":"5660aeb3b595a14f1adcb597f752735e","sha1":"047c5643bc8c7b0230717f5f27e6ee0033d54b2a","sha256":"c7d8effafe1b45f6af8d725927832a3701d88b496a6fee63b752395556f45497","sha512":"ed01d43866243383e410d7a4dbcf9677d7faecaf04d2a255d3330f326534f7c42d32569f7e8b862f3614105def6a5e86e321e4e4d1555b468805fea5d3369da8","ssdeep":"1536:h3imYjtVfRW+Qr6/KDUZZzEG912XkOOyy9klKvNhTMrkccRGu3WubPaNRjvBmAa:hXYLA1rCXVP26yy9k0hT4wPmusvW","tlshash":"c2630239e3c85264308ff05ed527a65ec4562b102f818b60a83f398bbd0175d8f9fa72","first_seen":"2025-02-21T17:11:11.099427Z","last_seen":"2026-08-28T13:47:02.070197Z","times_seen":18,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/fonts/ZillaSlab-SemiBold.woff2","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.666Z","timestamp":1787924784666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /fonts/ZillaSlab-SemiBold.woff2 HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:56 GMT\r\netag: \"6a79f018-11050\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lieKXsEEJHICpaoqaLo0fTEW7kcEkLM6nCnGN34N26gRmNv0HUVPozjphqMBLpGemgqYxK9OOYJ2NagCiR0bo90ZMl%2FhoFo393CQOoy2P6tUajEIz0U6LId32fFL0lcrtw0Cpcbj5W10%2FeD7IXo%3D\"}]}\r\ncf-ray: a323c3102c3956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69712,"size_decoded":70557,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 69712, version 1.0","md5":"34e05e5fc7086c5b65370438d3222e2a","sha1":"f8d0d295ad420d604edb3cf2f25ecb066c497432","sha256":"461f6929866b0657a4d7a3256818ae6e38ccdead1a56a997f1ca57619d872a02","sha512":"1bb41603804766afbfcaca437d9d4d297a64ca2c5a83f89dbc944c66f5a9585a01f62b92d03ae6b180afa87c9f9b7c346adcce3eb6e705649e298cd2f7c148fc","ssdeep":"1536:EIr8FyfBmFI7Sibby0Cq5Bb8UHrYwUdL68Bz:Es7fBN+IW65BbTZUd+8R","tlshash":"8b63021aa4a3b64712b4297f9a1db080f5beba8b8fc081f06c5e4254fe90c34dfd4946","first_seen":"2025-07-21T09:55:36.459927Z","last_seen":"2026-08-28T13:47:02.072116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/client.PGqbyWij.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.824Z","timestamp":1787924784824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/client.PGqbyWij.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:03 GMT\r\netag: \"6a79e4df-416\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vE024ekDFQO%2BQcSIB2Ck87NPPgc67OK%2B29KYgCWZjsYLy9QylR9UqFUkocqgcAZs%2FIBevLXH6syqnJN2YXR6%2BB5nKTcE%2FVRnwU9l53pzjmYcnqRllwGM85ql8DVcrc7a%2F3BrTmW%2BjtSQa5tgIsc%3D\"}]}\r\ncf-ray: a323c3113c4556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":1998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1573)","md5":"946a336060afbe4c370391cccf8dadb4","sha1":"ba15c45ce6930bb54619b2fead0116488d527c9a","sha256":"744311ae234de9b8562c299be1b18d71d88bcd8f9a4d72368c4c5bc6d083d029","sha512":"a930df5e12ef793434ed4d107a2fc0c9fcfd1e961ae33e840c24d1a7e96f7173b4e1b0cdfe1b3b1acb9f55ba0c3f7cc57caaa808a6dad2f0f5859bf2ac372034","ssdeep":"","tlshash":"0731b769f9e09f7380ec0dacd826340178593016b05ada94f3fe4b3b13e5955e11cf65","first_seen":"2026-08-28T13:47:02.073918Z","last_seen":"2026-08-28T13:47:02.073918Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/useJurisdiction.B0-1Pp-7.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.975Z","timestamp":1787924784975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/useJurisdiction.B0-1Pp-7.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/Homepage.CRHigtoQ.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:05 GMT\r\netag: \"6a79e4e1-826\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZW3Zzq8byUfaFiLgs5DVeAaZ9D4FETNBk%2FlstY35a6mgewJziBv3B9VB7PCnFD%2B6omlvBqwNIMaEUHWvg0rEkqMb5Cupf6ZCw5WH1r2Sw3TZFFntbt9bDo8R08f2msf%2FEPhmUrWHM%2BGaKAQJh0%3D\"}]}\r\ncf-ray: a323c3121c5656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":3032,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5199)","md5":"93eeb544dc99205a72f5acf1336e3eac","sha1":"8d3c383a18cc38ddba3878a1b8b9d880d47747fd","sha256":"96dc18666af8346aef249618707252cc76e955d2dd0214a865c33cb3e19d7ea7","sha512":"d3de23b3178ad5aa89b9051889b3464757387b79f21ecab925163b53cc6b1af3f0865909c175f836f95c9827e1f455f23ca4795ff36a565a0dcf985887a70622","ssdeep":"96:6GPvJEla5WjWKG3QkkxXJk1l8piSrIayrwjt6h3wjt1XnzXRg:x3JElIWyKNJ9piSrIayrwjtywjtg","tlshash":"fcb195e6b38034b483ff426eb59a90a4617c8e25654dd1c0bd8c8f272d71a8554723bf","first_seen":"2026-08-28T13:47:02.078224Z","last_seen":"2026-08-28T13:47:02.078224Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=#astro-retry=1787924786171","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:26.173Z","timestamp":1787924786173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:26 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:13 GMT\r\netag: \"6a79e4e9-738\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2013\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcRo0JNfoDVg%2BeroHNdHVvphnTGv8qIav0wxOhlFKFzxQYbyV1rm2Mc4DCnNKSODIoaLzODsm16ixIAfvwWD6jHhR3AlPcO9WptyMD5xVXhAkHf5q9i2DYYrpGl1Gie069ka6xMbAf7vFLuPPkk%3D\"}]}\r\ncf-ray: a323c3199cfb56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3869,"size_decoded":2788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3868)","md5":"542b0f6b7801def0c1b0d918bfb9daa7","sha1":"5ad03b829b552e283bda920a87a861590c3e10c1","sha256":"54a4e13e3aafa841888e735b3027f8c967992a63884963d363e119b1d6b80a6a","sha512":"c229e87324496c9dcbc2647597cb661e8c1ae2f916a697124078eb5cb6bee71b950c1c597bd731eaf92cfa26b14841fd85e45fde91011cf81dd0dbe214a60232","ssdeep":"","tlshash":"5881c88de5c49639b1570257f9417c11700ec2ebe7af7d86f67cca093386828c1c974a","first_seen":"2026-08-28T13:47:02.080214Z","last_seen":"2026-08-28T13:47:02.080214Z","times_seen":1,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/FooterSignOff.BhN048bN.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.849Z","timestamp":1787924784849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/FooterSignOff.BhN048bN.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:10 GMT\r\netag: \"6a79e4e6-414\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bDXWO2%2FErnUiTpa%2BmP%2BPrdqeaQi9soEtuklTTHW7krkHIoEMMVu757nhi0rcxcG3zT%2F1HMbaoowP5K%2F1XcCkWuHMwLyboIYTnwBMMu54huK7AVXnRhzSUvsO8bxQWQ0pSCgd8Sjz%2FaIqtw%2B6BeU%3D\"}]}\r\ncf-ray: a323c3115c4b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1752,"size_decoded":1996,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1751)","md5":"3fd96a368cc6782feaf5f9fd4c7dcfd5","sha1":"2c25a43d89ffa6b3d9be250546ab85c3b574ca28","sha256":"6c65df955863a7b4915c72eb09436c0ef230cdc46f1b490b0546b8887d0ac2f8","sha512":"224e6bf70c4b2b605948f26bb95b2f7923d6b40f72cb6981a4bb7aceea657d6d79c89e153c70718faf3a6381959793e6e86e83417f35bc9c9ed7b5e6ca749b29","ssdeep":"","tlshash":"3831858fb9d0de7f49df02ace8673080e5183457d78dce80907d0b2633703aa9505746","first_seen":"2026-08-28T13:47:02.082048Z","last_seen":"2026-08-28T13:47:02.082048Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/vue-vendor.CqizvWD4.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.955Z","timestamp":1787924784955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/vue-vendor.CqizvWD4.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:04 GMT\r\netag: \"6a79e4e0-cdff\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNG9uUs4QsB5HLsU2rtt%2FuaHE8P1pBGa%2BXUgkmhKbpshjFiaIk4j6R11b%2BQG19MTxbFxcfjh530xvfrPpDVicLcTmpAXWFuN%2FJRuFYPt1c9fWO6FZlCLJRhRXHvd5KyuMFovWLFv8Xh9aOn6sMY%3D\"}]}\r\ncf-ray: a323c311fc4f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143387,"size_decoded":53683,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34454)","md5":"69edbf904c494e68e586fce75c6d4306","sha1":"d7a85ae8d3a2f439e4c041757f253c9af9183aac","sha256":"1aaba03ccd52bfdc65f41dba368cc5ddc338f217cea04ffdf80a94e64733303e","sha512":"716ceae3cfebe9e402ea57785ec8514c0cf71fffdd09f3b2ba3ab1018991f967ea06cce7da0c35527e48e5571850e706ee718a0f454d0aa18dd78b66286b461b","ssdeep":"3072:wRktsXorCt85m7dmQ356QAXTW0O5QmlojdHvwjeD:wPXorZKIU6QAXTW0NmlojdHIjeD","tlshash":"6be329e93097b46293a60ae650b71406f33d2915380d98d4f1adee8b3e3384542b7f6d","first_seen":"2026-08-28T13:47:02.062738Z","last_seen":"2026-08-28T13:47:02.062738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/apple-touch-icon.png","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.969Z","timestamp":1787924784969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VowXnY6gviitveGh9xQ9F0SD9ZuhxTgEY%2B2IWWuEVIpO%2BZk8q9hJKQvM5da63ZqT9FyIyJwnsMcz6nqN8TmC70KFFFviDBL4LkVIzdOsG%2BPq30maqBKge45vsSp%2BmaB54k5oPZeqvw572Zkc5Nc%3D\"}]}\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nx-cache: HIT\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a323c312ac5b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3292,"size_decoded":3686,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"a7958bde90a1eb286127460488075d09","sha1":"31032f275058d1e5ff2ff839dadafcbdd52f8934","sha256":"35ff083f4a9fdcb4fec017f1b6cdd3e93d7a9e87d7ae7e32738cb88076093bf1","sha512":"ff1b37ce3fb6037a335649c577d3ee8db574a85a17fa2b6580b8296a041231d7bd37a0fec4aed5ca207a190c1084974b2d01d3f08226b294a926f78d8eecdb13","ssdeep":"96:gY777777777777iU3AwEB2uMStt/5eBvPmLiQUdyJmBXc7eoRwY2we2:s/MStt/ISiQ6pBM7eL/j2","tlshash":"03a12c50bea8b743f4ec76810d9436e15f1e45c4704b6619eb356232afd75e6309c990","first_seen":"2026-08-28T13:47:02.083595Z","last_seen":"2026-08-28T13:47:02.083595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/etc/img/onetime-logo-sm.png","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.688Z","timestamp":1787924784688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /etc/img/onetime-logo-sm.png HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:55 GMT\r\netag: \"6a79f017-2caf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1O3QjMLRNMHRIyHTkSpSD5a%2B77Z6b5pJMOnlALht%2BKcoUJTkkMWa3lFk7RLzJPLjL4JB0JOHOoY70Wzqs2TsUcSF1HGszdPXW9LVeggLcTbxg0kNWP%2FSe3hRHA7PPGnAKivKazJyhz6%2BMYQlx18%3D\"}]}\r\ncf-ray: a323c3105c3f56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11439\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11439,"size_decoded":12237,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"fae28a56fffa07d92ba57222d8ce42fa","sha1":"981bd8261e7725c322700e91e261d620b78b6f58","sha256":"fcb7219fe1582a36568505a0405c273d4b4d90b695656b7b7d867b1ac4f959ff","sha512":"389181ea04fdf83b4ad1bb62cd224332dc03e9df7c6afe8a122199ddad3d27f9955fb7b444cb02b948740f862dcc671e16b0305f5c9ae11be860c28c4a692cb7","ssdeep":"192:JBHiMluezwxh+NH/0SxX74VFGVFGqwpO9KUpz9N39hRtb/il81o3AmafeGh+16BN:vuez4Yzx+wgqKsb3Lb9/mSFbFqkP99","tlshash":"5f32b0c2cea548e3f29a8777d9869b035acb45b84825839f32df8c25fb1245212c9858","first_seen":"2025-07-21T09:55:36.441546Z","last_seen":"2026-08-28T13:47:02.085668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/index.Dy8DMq1Y.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.954Z","timestamp":1787924784954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/index.Dy8DMq1Y.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:05 GMT\r\netag: \"6a79e4e1-3ba\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGWdw3M7iUmtDp%2F9idemC5hxm3Qffc3Cd4OKJxkpQ5FPFer7j2vgF0NUZzHn%2FLUARZ1NuHSJfLAnoDGTa55OOOA6yS4hWn9MnjuHZWc%2FZFxdff9NSHGrjdCbF89qPx%2FP7SPJNxeyREf8HG4JRWs%3D\"}]}\r\ncf-ray: a323c311fc4e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1757,"size_decoded":1901,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1756)","md5":"94b81bb52764115910539d782ffe3de0","sha1":"e0fbde332fbe4784ca38df8212774aa3eadb4695","sha256":"80be4062453e77a7666c7d1a56811249a11e4d354288bb66b01cbf73bd93a11e","sha512":"d9de1a5a44f27486758ca3bf7d1e86de2125a7b9f8ba1b4ec8a739423bcec7a91a16541cc7810c503db8eeea2d47d33e9fe0aa2104be0c0160aebc44cfe3fd7d","ssdeep":"","tlshash":"1831436aa4b1496e907619dce90f3001a27402ad13ce5ee0b06f637913e57ccb6e9a1b","first_seen":"2026-08-28T13:47:02.087745Z","last_seen":"2026-08-28T13:47:02.087745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/index.Dy8DMq1Y.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.236Z","timestamp":1787924785236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /assets/index.Dy8DMq1Y.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 13:59:36 GMT\r\netag: \"6a79d948-3ba\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TRfptozF%2FIdxXy4b1GO1py4LYA715Dozw1d2hvBlWrSfXwXhTmVrvp3ZZahGvW0bl9LnKFHPiD8IGxktEI4Y8GHY2PLQ6Dkr%2F2AHdkA1HQ%2F9yn8o53mnDkB2Sdyf7zPbO1ObWjmf5KvNcm0Skf8%3D\"}]}\r\ncf-ray: a323c313bc6c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1757,"size_decoded":1897,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1756)","md5":"94b81bb52764115910539d782ffe3de0","sha1":"e0fbde332fbe4784ca38df8212774aa3eadb4695","sha256":"80be4062453e77a7666c7d1a56811249a11e4d354288bb66b01cbf73bd93a11e","sha512":"d9de1a5a44f27486758ca3bf7d1e86de2125a7b9f8ba1b4ec8a739423bcec7a91a16541cc7810c503db8eeea2d47d33e9fe0aa2104be0c0160aebc44cfe3fd7d","ssdeep":"","tlshash":"1831436aa4b1496e907619dce90f3001a27402ad13ce5ee0b06f637913e57ccb6e9a1b","first_seen":"2026-08-28T13:47:02.087745Z","last_seen":"2026-08-28T13:47:02.087745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/preload-helper.D7DX-ygP.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.238Z","timestamp":1787924785238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /assets/preload-helper.D7DX-ygP.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 13:59:41 GMT\r\netag: \"6a79d94d-3b8\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILTwb3ms2qwnoRt3gk8b%2BWK5MtjGWHEtmDZXTARVoN6eLpiaqycHhK2n1c8h6jTp4ex%2FO1PScYD5KTnuohOReB24nEFOzYv32qkxUFPz4RHt%2FqnnjaXuYkluGxaBIejTQscy2iLKk%2F90yWZSVDg%3D\"}]}\r\ncf-ray: a323c313bc6d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1669,"size_decoded":1897,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"fe980627310323ace492dd43a56f991b","sha1":"1bcb42953b7c29bd5b705f5c52f2c1b6916633f5","sha256":"6ed4662412fe0f33444b2b0311b19998c9078e83438b64ef160f9a7c36d825db","sha512":"e1de458de90b0a9898655217df31abbdb46c748251cf51096aefa92148ae8ba1e7b921098d5cf93b82bb218d0e346f7098f9058904ecd976a343b46ee6da4ceb","ssdeep":"","tlshash":"3b31748633f0a232025a1bacf0b96603fe941853744d4a81902d8aa4bb6aecad164f07","first_seen":"2026-08-28T13:47:02.039681Z","last_seen":"2026-08-28T13:47:02.039681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/fonts/ZillaSlab-BoldItalic.woff2","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.671Z","timestamp":1787924784671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /fonts/ZillaSlab-BoldItalic.woff2 HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:36:56 GMT\r\netag: \"6a79f018-1149c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public, max-age=31536000, immutable\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6MyRiK4r9L%2BdDQtvQGs1fhaAvOo8nylT82koh1w9aIspJXgP%2FL95HwthRs9nlE7XtNm8AhCUDBhLYZ4zNbo9815VbCHwLNA%2BOrCZtMpKuLsV88bmYDqbW6%2BCig5B1ttvGgesYXO9SZtdCpyyrA%3D\"}]}\r\ncf-ray: a323c3103c3a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70812\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70812,"size_decoded":71661,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 70812, version 1.0","md5":"200c68f070d43fff4df0a42a491bb687","sha1":"a4c17dc879b102ca193ada313bc87c57c1e93617","sha256":"52991ee6aa2a7ff7c02fa14f067a5c3cc58738f64efa0082b9d659080fa32b43","sha512":"a9407e8211310e96b517d6d3c5cc21cc7df36c0aed84f62ba329725b858a94089a7b4ec8aaf48c1aa9dd472eac1346c7ce0b31d20437997fc96e5cd369673660","ssdeep":"1536:5m2gxmDIDUY7cN4nZKcphe6na9dck/l+OR8lo6NvX2A3Ba8QVg:5HgxdDUYIN48cPno3kbo6Rvs8QVg","tlshash":"1d630272ee0be9a9e78b1dd10e5f49025e58b1c85de02d31184f2a9694eefc3cd27478","first_seen":"2025-02-21T17:11:11.101521Z","last_seen":"2026-08-28T13:47:02.090215Z","times_seen":18,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/Layout.DJP2rMjm.css?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.673Z","timestamp":1787924784673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/Layout.DJP2rMjm.css?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:56 GMT\r\netag: \"6a79e514-8426\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DDY%2BXvlB13jOBZbKXvk%2F6rTymHb5jvmNnOOVvL9UllD47ZtG03fdf6PxU5GKprtY6Ba%2BhBAaQQxWKWq4HdRci7B%2Fn%2FodwyxkaMZj9vq6MJ4QbeBZdzUtAQubQc%2BdkeZH06hf3Xl1B9X%2FKhJpbSY%3D\"}]}\r\ncf-ray: a323c3103c3b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235145,"size_decoded":34770,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d4cb8c14004f9a60fce3e6b040b3381d","sha1":"9a76f7cabd63ec2b123600727a19968ab01251ec","sha256":"c85bf0cf4bf69e942250bb421e7d1ea1dfec971e75f998f84586c90e989be1c4","sha512":"03ad2b6e258158ef2bd9184d0a0c16e57f25ff62346fa2af0ddceb34bf8329d1fd0fde122f2cf24e62076bcf086cd3608dc2e74d887d8f15b263543360d21da0","ssdeep":"3072:ljA2EyoG0b79sLmXOIF+fd0ht4sbwA2Eyo5JMb7nmLmD2IL+b6O6sQ7htAbZiNNV:5A2EyoQLm5wA2EyodLmUe3","tlshash":"13345264e2a0d67bbc3771ad93fce40c791a71a2edba47fdf911a1012bd27f24846520","first_seen":"2026-08-28T13:47:02.092203Z","last_seen":"2026-08-28T13:47:02.092203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingWatermark.CxaB0gop.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.826Z","timestamp":1787924784826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/StagingWatermark.CxaB0gop.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:12 GMT\r\netag: \"6a79e4e8-488\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8YrluId6l7S%2BIHGfn53Qs2Uj5al2zvfyLRdzEu%2Bz%2BIFo2M%2BoruAa5VRUDeqPZ541enTw4LxyhlNAhMJkFc2wvpT0dy9GacOW51m%2BD8ejeqVsWjBnz2cFSbjSoDoODX9y5RDTL9kLiCafimpiDjc%3D\"}]}\r\ncf-ray: a323c3113c4656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2022,"size_decoded":2108,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2021)","md5":"02f948f82df893f02db206bf7ed99768","sha1":"bcf92d46144ffb7ad7759730d8c6f31b651bfe32","sha256":"c8198e9bb190b4c4376af2be997cfaa08820a126981ec8960b79c565f6bc5e74","sha512":"00381d68b384f030dc6141bc30aaa3a3a10c36cfc379bc745bd11aec882010e209d93b6bdc3c75484cbe77b37367be9cecd22d18924297bf363bf401efb4a23c","ssdeep":"","tlshash":"0641f85c0bd4e42cb13606aafa776909711891ab938dcec9d17c163b23104be432e306","first_seen":"2026-08-28T13:47:02.093559Z","last_seen":"2026-08-28T13:47:02.093559Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/headlessui.SyVpAGJ3.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.967Z","timestamp":1787924784967,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/headlessui.SyVpAGJ3.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wz4ZQZZWyLCzq5Q%2Bi%2Bo6%2BHaoxX66JzP13izvX8kMIU%2F0ZXSvvPuDA8VW8mm%2Fw6gyZrHFCtKn04nUy3b0tt5UvBnCpF7N7Ihg3aQAc2MQk4HuSRDCvXchNqOcXGM10elRz5VssupafwtF4xqNpA0%3D\"}]}\r\no-request-id: 6633a1a2-3b47-4191-8a2b-c0c3d9bfe6da\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\ncache-control: private, max-age=31536000, must-revalidate\r\npragma: no-cache\r\ncdn-cache-control: no-store\r\nsurrogate-control: no-store\r\nvary: Accept-Encoding\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c3120c5556c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T18:22:35.648782Z","times_seen":18171110,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/favicon.svg","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.970Z","timestamp":1787924784970,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\nlast-modified: Fri, 28 Aug 2026 13:12:53 GMT\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgDjE2p4uS5PeD%2B6WonBOJVVlD0LH21Ur4CIWiSOsjqkqZFvITlLH5Nm%2FKIJYLEPeGfhp3iP%2FM3HBiSObJ%2FhtIOTmdCCzFdnY8jwLMfqhHjZBmwYNSzJmFHP0GHxTcdvWCO1tEgFrJJJAxpqN8M%3D\"}]}\r\ncf-ray: a323c312ac5a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2477\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5289,"size_decoded":3300,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f316dc1236f70dd9ee480df720b6027","sha1":"0f4bf3411cacc366357520b87daaabc4ee67e311","sha256":"92910d5bb768a036b22b3358d960a4f05b3220d0e3427583cc2fbabdb9faab86","sha512":"c2682165a6f9779921bc2e40ee1a6642fd4647956964b23eb7c6b27f84ed9d5bd575be193daf8193070501928aeecef1aba5065186e46ba511cfe980265007fd","ssdeep":"96:8QzMmjhA36jeOctbx/Oxta6EkEbVr4I5lWA155NTnueFPkILpLE325Hf3V8Lp6:uxKyOIx/Oxo9R6UNTnzBkmVE36vVn","tlshash":"46b1219def204df58e8c47d46d2186e5bb1b942e6a252b34c14dd3b33c11daec5ac84e","first_seen":"2025-02-21T17:11:11.089345Z","last_seen":"2026-08-28T13:47:02.094662Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/assets/i18n-en.D8AKcyza.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.239Z","timestamp":1787924785239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /assets/i18n-en.D8AKcyza.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 13:59:42 GMT\r\netag: \"6a79d94e-198a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPp1GGLseCIXoPdypvdPLvXmOtCEYIfIAzWMGK7eTMndUDb8DX5n0xosPmYxSL1O%2FSscI6qrw4yC%2B0itxWBZniOSgWtArH3B2xe4mf1UrJgj9htGNNKsZH2HAtVgkasmHF2kJmVM9IjVPEieY9I%3D\"}]}\r\ncf-ray: a323c313cc7056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16858,"size_decoded":7481,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16849)","md5":"beff941314acbbe34b8ed7ced7116109","sha1":"eeda2a7220c2ccc6d57987c360c348b766319d68","sha256":"80ca587c8386609b95bd915d415fb41a64253658c165758f92748af3076d2688","sha512":"e717eebeb8d106755a094de6c3c2982e18f3b425245f7e373581464973a872da0d5effa0b7356b20ce1f2756afd9797eedb8861332d80bc5252892a9a2662128","ssdeep":"192:zIKQJiBpNIxFzyKsvqHiLp2hcayikKcBOtABcJYczvyktm96cbF/iQDWQzJkb0GH:zIKQEANit2hSKcdBcB1ogGOjYjt+V","tlshash":"8d72b55bb6601e7687c703dbb9d6b649b6b8450627c04899cc9e810c1398fdfe33b1e9","first_seen":"2026-08-28T13:47:02.095802Z","last_seen":"2026-08-28T13:47:02.095802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/countryToJurisdiction.CJfJZo-p.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.402Z","timestamp":1787924785402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/countryToJurisdiction.CJfJZo-p.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/useJurisdiction.B0-1Pp-7.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRLT9U9iAqnVbhuiyuWxKxv182nJ4oxgQblmstsRi4ZD4Fhdn61UpWMQOdKmp78atJaq5KW2fySkTeGPvCRtxrDtTdpIZTZKlspodiHz6SiksMGtujF4Z7TKp3maSgsqOse7TgHdicuCG5uxMEQ%3D\"}]}\r\no-request-id: 15725cd1-efa6-42e1-9266-b2a12058ae17\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\ncache-control: private, max-age=31536000, must-revalidate\r\npragma: no-cache\r\ncdn-cache-control: no-store\r\nsurrogate-control: no-store\r\nvary: Accept-Encoding\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nage: 2012\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a323c314cc8756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T18:22:35.648782Z","times_seen":18171110,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/Homepage.CRHigtoQ.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.832Z","timestamp":1787924784832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/Homepage.CRHigtoQ.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:02 GMT\r\netag: \"6a79e4de-3474\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UB7rkpazKgqEL53Wk9p%2Bp9LmqF8lY2eD9UQ%2BW36EBD0lWximhidHiSzE4Ej1a%2BP0qaZl9bnAxsXYtrGpJrvg%2BpI%2BeiTrEWSeif%2BIrrGZiVERTjeHsRbyAdiRiILpVtEF%2BeQmGpCMuWK24dunnGk%3D\"}]}\r\ncf-ray: a323c3114c4756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46306,"size_decoded":14382,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41698)","md5":"083b59eae3489b541f9e52fd60cbad99","sha1":"f856c59f5e49b21589a0ccd15c2fcfa65fc775a3","sha256":"0393b512ca72545348ed57760cb17c96bfad1e805a9bbacb61eef6702ab5d152","sha512":"55f588019952a7e331fb6ca5109cf8beca337953b169aff768f19c060671655a172e23a9a0184099554a4bad7994e0886003e1974fdd186815aaa53b1f145e92","ssdeep":"768:zBdk2bqHjsMCgk9G3zdtj5AGJXo1bJ1m8e3jGjuLx5bLZsK57+lBRI9GLx5DhtFb:kj5A2GXEGI9KhtF6rYGArE8UeWhpt4Nv","tlshash":"8023f84e716069bdd1eb487b749eb8086e2d0fa3e243c9d2ea7cc83537658b1d607760","first_seen":"2026-08-28T13:47:02.098454Z","last_seen":"2026-08-28T13:47:02.098454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.841Z","timestamp":1787924784841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/LanguageSwitcher.Ci_HZCuG.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:13 GMT\r\netag: \"6a79e4e9-738\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ZnZkFW4jfEzPsGOocMN7HOHBc3MeNjEumrdPAziJDLUdJqEgRO8hhepBFK11%2B7SlzF1%2BDrwRyxhE4oYqcNb2STluBN5KgpThg1aoLOhTGY3YH0b7eNzfU9Q9GLgzUQ3QyN0Lilomqxd6d%2BffYw%3D\"}]}\r\ncf-ray: a323c3115c4956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3869,"size_decoded":2792,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3868)","md5":"542b0f6b7801def0c1b0d918bfb9daa7","sha1":"5ad03b829b552e283bda920a87a861590c3e10c1","sha256":"54a4e13e3aafa841888e735b3027f8c967992a63884963d363e119b1d6b80a6a","sha512":"c229e87324496c9dcbc2647597cb661e8c1ae2f916a697124078eb5cb6bee71b950c1c597bd731eaf92cfa26b14841fd85e45fde91011cf81dd0dbe214a60232","ssdeep":"","tlshash":"5881c88de5c49639b1570257f9417c11700ec2ebe7af7d86f67cca093386828c1c974a","first_seen":"2026-08-28T13:47:02.080214Z","last_seen":"2026-08-28T13:47:02.080214Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/i18n-en.D8AKcyza.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.176Z","timestamp":1787924785176,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/i18n-en.D8AKcyza.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/index.Dy8DMq1Y.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:09 GMT\r\netag: \"6a79e4e5-198a\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DqvYPrObG3c%2B90s%2BY0aEZGyyFvKcrzi8yb7kFVzgsCLTTDqnK17Yd7OQfuBzLRmvYYeCzYGa68e3XRw7z8cawmg5TcUt6cpoY5vv9ZRlSblUej37%2BlXRuRU9eIB%2FIzsEt4tvWlpICzXLRbgQvQ0%3D\"}]}\r\ncf-ray: a323c3135c6656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6538\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16858,"size_decoded":7485,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16849)","md5":"beff941314acbbe34b8ed7ced7116109","sha1":"eeda2a7220c2ccc6d57987c360c348b766319d68","sha256":"80ca587c8386609b95bd915d415fb41a64253658c165758f92748af3076d2688","sha512":"e717eebeb8d106755a094de6c3c2982e18f3b425245f7e373581464973a872da0d5effa0b7356b20ce1f2756afd9797eedb8861332d80bc5252892a9a2662128","ssdeep":"192:zIKQJiBpNIxFzyKsvqHiLp2hcayikKcBOtABcJYczvyktm96cbF/iQDWQzJkb0GH:zIKQEANit2hSKcdBcB1ogGOjYjt+V","tlshash":"8d72b55bb6601e7687c703dbb9d6b649b6b8450627c04899cc9e810c1398fdfe33b1e9","first_seen":"2026-08-28T13:47:02.095802Z","last_seen":"2026-08-28T13:47:02.095802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/App._ih9KJFl.js","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:25.243Z","timestamp":1787924785243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/App._ih9KJFl.js HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/dist/assets/client.PGqbyWij.js?_cb=\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:25 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 15:37:42 GMT\r\netag: \"6a79f046-1d9\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FIaQ%2FYs1zjv%2BcE5J82xSDsKst6mT%2FwLWDdIW4aEmTLB1%2FUQN1WUxzufd2EnO7DzEP%2BHOsoaTiM5p8cn%2FtbspWkklgqLz%2FnPYLqZAmLWn9%2BH4acicR2ukGl2AfCLiUE6X2JAWRb3t3Qy%2F2b20QoU%3D\"}]}\r\ncf-ray: a323c313cc6e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":1428,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (724)","md5":"25277b87bd5788de88c6d4e6506e8ada","sha1":"807408609ed529381569a96689d420ac7c2944e2","sha256":"44906d23b23ae86fe2202fd233d2f85f49ade6e766f6dcd215fd921c889be720","sha512":"158dbc3eb3cde8acd6de07813fd88d6b4ce92fe6f3d9f24aaca8b7a18c85381b5629068020f2f4204cfde88c67a655a3cd539a7291e6aa48170f433bd453160f","ssdeep":"","tlshash":"2a01154959f1120780a6056cf42771067964503612ed8f82717a0b3d2beaadfe539b47","first_seen":"2026-08-28T13:47:02.061269Z","last_seen":"2026-08-28T13:47:02.061269Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingWatermark.CxaB0gop.js?_cb=#astro-retry=1787924786053","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:26.058Z","timestamp":1787924786058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/StagingWatermark.CxaB0gop.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:26 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:12 GMT\r\netag: \"6a79e4e8-488\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2013\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz4HIlCAjLtd6LKxUh4YvDYasw%2BP2Mibj83HQ2CKGKnxDFuxA3eXVBU6fniLvhW0PZrBSZ9Ir7Q%2Frv2Z3suf415GyVo1yaPc4Lr%2F0EfNVO9S%2Bn5amWC6%2B4kPOWYYCT5PjF5NaaouiHgO%2BRlOKSI%3D\"}]}\r\ncf-ray: a323c318dcf156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2022,"size_decoded":2110,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2021)","md5":"02f948f82df893f02db206bf7ed99768","sha1":"bcf92d46144ffb7ad7759730d8c6f31b651bfe32","sha256":"c8198e9bb190b4c4376af2be997cfaa08820a126981ec8960b79c565f6bc5e74","sha512":"00381d68b384f030dc6141bc30aaa3a3a10c36cfc379bc745bd11aec882010e209d93b6bdc3c75484cbe77b37367be9cecd22d18924297bf363bf401efb4a23c","ssdeep":"","tlshash":"0641f85c0bd4e42cb13606aafa776909711891ab938dcec9d17c163b23104be432e306","first_seen":"2026-08-28T13:47:02.093559Z","last_seen":"2026-08-28T13:47:02.093559Z","times_seen":1,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/Layout.DJP2rMjm.css","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.660Z","timestamp":1787924784660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/Layout.DJP2rMjm.css HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:56 GMT\r\netag: \"6a79e514-8426\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1lW0Rr5FH8iQCb7FbwT7fFIKaXUEbLjM8N8Pok%2B81MPR%2BmppCMjuJvS4Gw7eOg9WlFzTkOcZ6ougYzVf8SbzfPiqRmYAPfFN7IYJ6%2FJWm6UmFv7gNVnN%2BFOo%2Bio2IHYraqk7KH9cEOqEicYcfo%3D\"}]}\r\ncf-ray: a323c3102c3656c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235145,"size_decoded":34766,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d4cb8c14004f9a60fce3e6b040b3381d","sha1":"9a76f7cabd63ec2b123600727a19968ab01251ec","sha256":"c85bf0cf4bf69e942250bb421e7d1ea1dfec971e75f998f84586c90e989be1c4","sha512":"03ad2b6e258158ef2bd9184d0a0c16e57f25ff62346fa2af0ddceb34bf8329d1fd0fde122f2cf24e62076bcf086cd3608dc2e74d887d8f15b263543360d21da0","ssdeep":"3072:ljA2EyoG0b79sLmXOIF+fd0ht4sbwA2Eyo5JMb7nmLmD2IL+b6O6sQ7htAbZiNNV:5A2EyoQLm5wA2EyodLmUe3","tlshash":"13345264e2a0d67bbc3771ad93fce40c791a71a2edba47fdf911a1012bd27f24846520","first_seen":"2026-08-28T13:47:02.092203Z","last_seen":"2026-08-28T13:47:02.092203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/page.BYIF2uXK.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.676Z","timestamp":1787924784676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/page.BYIF2uXK.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:01 GMT\r\netag: \"6a79e4dd-127\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HPVKOPTGTofkOiSHXz5o40t336i2mi5hsUgczDUf8WPh1MAD%2BQ1ed8KFAqsXIZg39rmmFuNSo6X54jYE%2BWKQGV2vMn85Aa8ulaHhiW19AcdRSUFC1AyOTzy7g8MxkojNbRU4JiJd%2B1utwY%2FqNo%3D\"}]}\r\ncf-ray: a323c3104c3c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416,"size_decoded":1240,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (415)","md5":"bdc7f8c2b8c0bb9e237a2da6cb3b0e67","sha1":"ccccfe6dfeb39dd6ef8145891a55939d69ade27f","sha256":"a47ccc26a4851a625051eaa9f12114ecbfa1fe55a0b362e7cf0f6f7e3a6ebf22","sha512":"ab7335533e15bc352141846169d0a36f0e44ef8737eaf6399d3e793e7a3522816adb9552918f604238871a272018a0797f876b580a451177bce83bb57e9786b3","ssdeep":"","tlshash":"2ae0abc8cbf0060a41162b7de82e6100ba580023c2cd4f61a27c877b33a9f999d09387","first_seen":"2026-08-28T13:47:02.103283Z","last_seen":"2026-08-28T13:47:02.103283Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"onetimesecret.com-secret.to/dist/assets/StagingBanner.VYaacLpm.js?_cb=","fqdn":"onetimesecret.com-secret.to","domain":"com-secret.to","tld":"to"},"ip":{"addr":"172.67.151.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetimesecret.com-secret.to/","date":"2026-08-28T13:46:24.822Z","timestamp":1787924784822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"com-secret.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 16:13:51 GMT","end":"Thu, 05 Nov 2026 17:11:30 GMT"},"fingerprint":{"sha1":"E5:FE:02:C3:9B:ED:6A:AA:2C:97:17:C3:D3:BC:45:7F:EF:39:56:81","sha256":"04:DD:CC:45:51:0B:1A:55:2E:CB:09:FA:B1:5A:F0:54:02:9E:E1:5C:95:06:40:63:C9:58:83:54:CC:19:33:82"}}},"request":{"raw":"GET /dist/assets/StagingBanner.VYaacLpm.js?_cb= HTTP/1.1\r\nHost: onetimesecret.com-secret.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://onetimesecret.com-secret.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 28 Aug 2026 13:46:24 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 10 Aug 2026 14:49:11 GMT\r\netag: \"6a79e4e7-636\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccess-control-allow-origin: https://onetimesecret.com-secret.to\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nage: 2012\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENYqOioSvNYUFMlKrF9swNgpOVwyieBnQMHSHAhy2UdtVmUXATbPDQD7XVQzJLwLTr8H%2F20q8rAq4gR9S5CI%2BwsZxX%2FSu8UIEMyvfBKtOQf6OqaKO5p1rL%2F4GVIyAaaUofpJIGMmGlD%2F2Xl5Fuc%3D\"}]}\r\ncf-ray: a323c3113c4456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3038,"size_decoded":2538,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3037)","md5":"42153f6c8831676d4010cc46128f26f5","sha1":"dc9050ff61719f72e352a7cca3579e04cb5992ea","sha256":"7dff56023c435aa8fcc35e8bdc743a25364965760f62e476b1b957d0ce1c37c0","sha512":"8dd6e2eb73868cc594b58ad509e7ee2288574ab8ea6402b5e9d40b96050b77a0126dfc0489c8abca9865af16183e32ab241f8e85655d89526f7f99445b1c444d","ssdeep":"","tlshash":"6251c94a77d0847c815f05ddf41b3c0b91597f60c28ac56fe9bc9276273587c9b86340","first_seen":"2026-08-28T13:47:02.065164Z","last_seen":"2026-08-28T13:47:02.065164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"onetimesecret.com-secret.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}