{"report_id":"03e21edc-4350-4cba-9666-52924a48529e","version":0,"status":"done","tags":[],"date":"2026-07-14T17:53:25Z","url":{"schema":"http","addr":"headquartershealth9.pro","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"headquartershealth9.pro/","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"title":"Un set preparado para entrevistas, análisis y conexiones remotas | Taller Banking Finance News Norte","dom":{"size":6019,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (881)","md5":"549891b6f21918d619814dd6303e7e0f","sha1":"db4c01223c26be9406014ad18ef311141d60e3c4","sha256":"96d833e9ca8008d8ba0f46e9fc20769332f2afc7d32cb201b0261b0bc1420820","sha512":"fa416e0f9bc461f6423cbf7c0799ec584ef3c70f4e64ddc8301b026f3b9fd968355807c56fb87f2762abc472501bf70f5fadb5655d4fb1c5a5c27b3a9a3e1077","ssdeep":"96:0RcIcZQ9x5KIFkeo+THEcnnawycVyqqtEeuEa8PESoMNfUUySOnmzEql7SditdZ3:0RcIsOoIFdo+oanawycVvque75MvhU7Z","tlshash":"35c1d561a5c81d3f83b312cc519ba75b35a6d24bbe0e4870399c5e320fd4f4aea77846","dom_hash":"domhash2a4aa58ba0ee36644d1b85caccf23547","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"headquartershealth9.pro","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-18T17:53:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"headquartershealth9.pro","ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-14T17:50:52.595289Z","last_seen":"2026-07-14T17:50:52.595289Z","alert_count":10,"request_count":5,"received_data":311934,"sent_data":3242,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"headquartershealth9.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T17:18:38.670326Z","times_seen":399902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"headquartershealth9.pro/","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce266ef7c2ed40a9a0739718ff84885a","sha1":"425ca215f3e5f3fc5a5883b011acf7df4a53080d","sha256":"a215381ad0df8e785272e5557a696c61fa4231a2a6ec548ddd38d5fd4a816503","sha512":"80d724e08ae4a8f87f574c552bea7571921eeda5053a7e573cb23de7e8ddce2ca6e2f5f7ceea095b98345778d61b21ff8edfae5dba7121a0574e4676effe4120","ssdeep":"","tlshash":"9d11d0ac70ce25f55277517c57dbab89393a2093200fd0283d199c103f50a56bfaaa83","size":887,"data":"","first_seen":"2026-06-24T02:28:47.761486Z","last_seen":"2026-07-16T13:51:30.211947Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"headquartershealth9.pro/","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-14T17:52:58.694Z","timestamp":1784051578694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"headquartershealth9.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 09:59:13 GMT","end":"Wed, 23 Sep 2026 10:57:48 GMT"},"fingerprint":{"sha1":"CA:C6:FE:69:01:CF:0F:75:D7:31:E3:4B:0A:62:1B:A9:AB:5A:4E:36","sha256":"B4:77:51:AA:7E:61:15:A4:6E:A6:46:F0:D1:3F:89:69:C7:ED:1D:90:68:17:B1:49:4D:77:1F:C7:D3:61:C9:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: headquartershealth9.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:52:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npermissions-policy: browsing-topics=(self)\r\nset-cookie: k-WKI_UUU7boXGStoL-7v6dTXuG2qyjoM7oU8s0pqtRyIK33ILIoK5wtTflbyYarYrZIqUBf8yc_DVWgQbMXxw=83bb60e12790d6fb165db77501441d3b; max-age=2592000; path=/; HttpOnly\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BgZ2NAOE0DZ2Bmosempo6gVEu3s1wYjg1dpliQvdabgYEA5wok2tMbGQfaShQMqkqDckk7nm080nXXLiXPenD7Rp0VA98PBKwzlWSRVFE0SxU%2Fc10w4S6javrDGnm9TyHnHAIIba%2FG5VwA%3D%3D\"}]}\r\ncf-ray: a1b2625f6ab1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6319,"size_decoded":3327,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (881)","md5":"e2252818225214d47fd0e6101bf93faa","sha1":"a1e3ddd1540cc870b8f8ace2ed955959a324d044","sha256":"79bf018dcab544ad82099c8341af2327b1025da38ae653c3e55b9e95f742598d","sha512":"b7d7c5e123dd0ff00683978ebf8396cc7956e68b0df697921c84066a80d609057934f769bb7735e3e38aa5154c8ccaa67891495f6983a968dd205d9f3c2da405","ssdeep":"192:4RcIsOoIFdo+oanawycVvque75MvhUhk/SJpkjop:4RYOldlycdf2+5UhpX","tlshash":"69d1d921a5c81d3b82b711cc50d7a75b31e6d24abe0d4870799c9e720fd4f5aea37846","first_seen":"2026-07-14T17:53:26.469647Z","last_seen":"2026-07-14T17:53:26.469647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":72,"connect":14,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"headquartershealth9.pro/_cdn/production/landing-cdn/71608f3d-e989-4787-a78b-ba30c12cdb87/e56afd62-c5fa-497c-b2e6-2161248e0eee/styles.css","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://headquartershealth9.pro/","date":"2026-07-14T17:52:59.488Z","timestamp":1784051579488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"headquartershealth9.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 09:59:13 GMT","end":"Wed, 23 Sep 2026 10:57:48 GMT"},"fingerprint":{"sha1":"CA:C6:FE:69:01:CF:0F:75:D7:31:E3:4B:0A:62:1B:A9:AB:5A:4E:36","sha256":"B4:77:51:AA:7E:61:15:A4:6E:A6:46:F0:D1:3F:89:69:C7:ED:1D:90:68:17:B1:49:4D:77:1F:C7:D3:61:C9:1E"}}},"request":{"raw":"GET /_cdn/production/landing-cdn/71608f3d-e989-4787-a78b-ba30c12cdb87/e56afd62-c5fa-497c-b2e6-2161248e0eee/styles.css HTTP/1.1\r\nHost: headquartershealth9.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://headquartershealth9.pro/\r\nCookie: k-WKI_UUU7boXGStoL-7v6dTXuG2qyjoM7oU8s0pqtRyIK33ILIoK5wtTflbyYarYrZIqUBf8yc_DVWgQbMXxw=83bb60e12790d6fb165db77501441d3b\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:52:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69DaFOW3hu6Xiphj14Flbp%2BBHDwX32g5fpZornHr9WJg1c9802SweDEH%2FaGamsq2XU8amxEQVNwOzbtt0XW1DYL9roi5ZoF17CtFAvohiG2I9wIYm%2B7bcGHJWt3qznz6MA950b5X6tEkBA%3D%3D\"}]}\r\nlast-modified: Tue, 14 Jul 2026 17:47:35 GMT\r\nage: 156\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1b26263cb34783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5367,"size_decoded":2570,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5177)","md5":"2343f5900f93e4c648b0debad5493960","sha1":"2c722389052e4922ea791ff6e44cd46a598f9ce3","sha256":"32cd78db3bb85565b4e1fad38e1b41cd21b90ac6059288ae8c39a09d28ef1a33","sha512":"e015bcfc0a5a7eb4f789f848d2b8516b92b1eff2f0c5280baea6e2f86fe65bf63fdd302dd121fb9c453eae82278d32a7b40599b82ae9c7581b631d3c190b1927","ssdeep":"96:rxK6RkcMVZ+tIhPyciXnAFtmKOdgZiZuCxyGCE+g9m2D0W+ktUMilaPt:lycMVZ+6JyQ+9gIxjN97Ll","tlshash":"a7b1855d339b7238b97fe45199891b4eb025f301c93b6bf8acd1e260c4f61e225e890d","first_seen":"2026-07-14T17:50:56.523351Z","last_seen":"2026-07-14T17:53:26.470499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"headquartershealth9.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://headquartershealth9.pro/","date":"2026-07-14T17:52:59.491Z","timestamp":1784051579491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"headquartershealth9.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 09:59:13 GMT","end":"Wed, 23 Sep 2026 10:57:48 GMT"},"fingerprint":{"sha1":"CA:C6:FE:69:01:CF:0F:75:D7:31:E3:4B:0A:62:1B:A9:AB:5A:4E:36","sha256":"B4:77:51:AA:7E:61:15:A4:6E:A6:46:F0:D1:3F:89:69:C7:ED:1D:90:68:17:B1:49:4D:77:1F:C7:D3:61:C9:1E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: headquartershealth9.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://headquartershealth9.pro/\r\nCookie: k-WKI_UUU7boXGStoL-7v6dTXuG2qyjoM7oU8s0pqtRyIK33ILIoK5wtTflbyYarYrZIqUBf8yc_DVWgQbMXxw=83bb60e12790d6fb165db77501441d3b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Thu, 16 Jul 2026 17:52:59 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FM5A2uVTLHdbrqU6v05FyUBbMArPF5bsUFrZjrmqF0w%2FsyTEhK1EAa1ohbsx%2BMta0V8UKPAEhxs3KI%2F7ypXekAAw%2FrFtC3zXR7xq47uXeYVQkqgm6EN%2BY1rjhUTMu0qPrkk9R%2BQlwo04Xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Tue, 14 Jul 2026 17:52:59 GMT\r\nserver: cloudflare\r\ncf-ray: a1b26263db35783d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1310,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-18T17:18:38.670326Z","times_seen":399902,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"headquartershealth9.pro/_cdn/production/landing-cdn/71608f3d-e989-4787-a78b-ba30c12cdb87/e56afd62-c5fa-497c-b2e6-2161248e0eee/assets/hero-web-mr0nag6m-36.jpg","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://headquartershealth9.pro/","date":"2026-07-14T17:52:59.495Z","timestamp":1784051579495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"headquartershealth9.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 09:59:13 GMT","end":"Wed, 23 Sep 2026 10:57:48 GMT"},"fingerprint":{"sha1":"CA:C6:FE:69:01:CF:0F:75:D7:31:E3:4B:0A:62:1B:A9:AB:5A:4E:36","sha256":"B4:77:51:AA:7E:61:15:A4:6E:A6:46:F0:D1:3F:89:69:C7:ED:1D:90:68:17:B1:49:4D:77:1F:C7:D3:61:C9:1E"}}},"request":{"raw":"GET /_cdn/production/landing-cdn/71608f3d-e989-4787-a78b-ba30c12cdb87/e56afd62-c5fa-497c-b2e6-2161248e0eee/assets/hero-web-mr0nag6m-36.jpg HTTP/1.1\r\nHost: headquartershealth9.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://headquartershealth9.pro/\r\nCookie: k-WKI_UUU7boXGStoL-7v6dTXuG2qyjoM7oU8s0pqtRyIK33ILIoK5wtTflbyYarYrZIqUBf8yc_DVWgQbMXxw=83bb60e12790d6fb165db77501441d3b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:52:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 14 Jul 2026 17:47:35 GMT\r\nage: 156\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D23GTX4U%2BXCEHqXH4InAsN4jlXhhwNTSdfjNBzKXOsCSuN01Pq4Z3qbejbJsWcNt5UMjaTN8hA7ZlnUQDAWEcIZWgSSErKFEQf2yHWDcpODipMRdt19OVkvWICyQ0jx0A4DsNl%2FuthATuQ%3D%3D\"}]}\r\ncf-ray: a1b26263db36783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 295512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295512,"size_decoded":296201,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 95\", progressive, precision 8, 1152x768, components 3","md5":"310dbb3da190fe50d5d3d463982ef1a9","sha1":"6ac29aa63ce692b8f0297abf46f1c85e3f949e36","sha256":"7c0c85922b8af68650fee892e4af0fea1606b350c748fa689f79d2e7bce6f882","sha512":"567f150d569afcce85cf6cb17991fadad0f2989ab4316ab1149a7eb55521136f6106b0458fccafe8be4d71dacab6bae2f3a9f94228b7837ee1cbd7a33fa0b90b","ssdeep":"6144:OQFU/2LBL0Q/SnXLToXOzK3nZXUItMY/2je4m7sM8IJhFzVj35S6:dU/4sxK3nJfugSezZx5J","tlshash":"3a542303852bf370afca857c8dd3d7ab447395ea118b0adc397a864c4197865e8f09db","first_seen":"2026-07-14T17:50:56.524983Z","last_seen":"2026-07-14T17:53:26.471877Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"headquartershealth9.pro/favicon.ico","fqdn":"headquartershealth9.pro","domain":"headquartershealth9.pro","tld":"pro"},"ip":{"addr":"104.21.35.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://headquartershealth9.pro/","date":"2026-07-14T17:52:59.546Z","timestamp":1784051579546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"headquartershealth9.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 09:59:13 GMT","end":"Wed, 23 Sep 2026 10:57:48 GMT"},"fingerprint":{"sha1":"CA:C6:FE:69:01:CF:0F:75:D7:31:E3:4B:0A:62:1B:A9:AB:5A:4E:36","sha256":"B4:77:51:AA:7E:61:15:A4:6E:A6:46:F0:D1:3F:89:69:C7:ED:1D:90:68:17:B1:49:4D:77:1F:C7:D3:61:C9:1E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: headquartershealth9.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://headquartershealth9.pro/\r\nCookie: k-WKI_UUU7boXGStoL-7v6dTXuG2qyjoM7oU8s0pqtRyIK33ILIoK5wtTflbyYarYrZIqUBf8yc_DVWgQbMXxw=83bb60e12790d6fb165db77501441d3b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 412 \r\nserver: cloudflare\r\ndate: Tue, 14 Jul 2026 17:52:59 GMT\r\nserver-timing: cfExtPri\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCMTRcTEk0uM0R5KICn37050BE0US6etfCaP%2FatgMr5YZ%2FCtrJwb0k9wQ%2FyJX97DviAWlNz6hQJ5pj3QSD%2FHZ4MWSby5CmBZxIIqISOwNs9lg5NMPY2GwiPsBY2NsgzfqGtkUAreUB%2F2mQ%3D%3D\"}]}\r\ncf-ray: a1b262642b43783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"412","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":661,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T17:18:38.641517Z","times_seen":17343882,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-14","alert":"Sinkholed","trigger":"headquartershealth9.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}