{"report_id":"05dcb4e6-66d7-45a4-baa2-0efcf8e63faf","version":6,"status":"done","tags":[],"date":"2026-03-07T00:56:09Z","url":{"schema":"http","addr":"heleket-payment.com","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"heleket-payment.com/","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"title":"Heleket Payment","dom":{"size":2527,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1749)","md5":"62565a266f43f7fd438b9f2f5aaf1934","sha1":"954e38db24f6fe5c88abc2e1f8fd28093d03c6f3","sha256":"592b207ebbfe906e91cca5967f5e4803622f891b6517633e979f0c468af5ad5f","sha512":"5c6f7f941041a658eef3103875bef64ab8b8b823cf14eaf50aa016b6a60090614375abc7eed1fe19b6f049ccfb7f5fc07b0d03617a9988dced4f08118cbc5416","ssdeep":"","tlshash":"955138613072462bc33385cdb8657f2b34b2fb8bc50a7162b6ba21948fdeda1744d069","dom_hash":"domhash96360f3d06e5b3adb67093170dbb2496","first_seen":"2026-03-07T00:56:18.49497Z","last_seen":"2026-03-07T01:12:31.652447Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heleket-payment.com","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T00:56:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":99484,"sent_data":2212,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heleket-payment.com","ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":2064914,"sent_data":2258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":1,"received_data":1091763,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":2,"received_data":16919,"sent_data":995,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rpc.walletconnect.org","ip":{"addr":"3.120.100.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-03-26","domain_rank":891779,"first_seen":"2023-02-11T03:06:43Z","last_seen":"2026-02-28T16:30:59.445833Z","alert_count":0,"request_count":1,"received_data":1653,"sent_data":509,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tronweb@5.3.2/dist/TronWeb.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d2c48e0d40dab215c993e276c7b4c8","sha1":"953fa4ed22d4e68eeca22ea3d44a857027f9f460","sha256":"d9522e183a41f8bb059b8b61f5ff99c9eb831f2be6662bf6f1713771648adb59","sha512":"1a7da4e5eff61cd7738511ab84da171037f57eec3dd817f0b9425d0260d0c5addf36135cf6e48803d2abb26e22036e970bd1672710d92abf3ab8bccbce07eda3","ssdeep":"6144:y+WOYV+9x9JXV2vCRoIqbt15LAVbjsRyK2ZU13U+wZ/qpY9lgmpuLWiLyUvPDgea:rYVi9eIqbtvLAVbjsUKyqGSWYC493KYM","tlshash":"c435098876c6f166439220e0143b640eb23dbb5cd45ca554f398e4e37df9ada872bb34","size":1090996,"data":"","first_seen":"2026-02-01T05:32:39.425098Z","last_seen":"2026-07-27T07:51:47.266543Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/assets/index-DbmtYx_D.js","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41316e7d0769cd1127c57033287d0867","sha1":"70093f0b9d108989f6ce2250e4d61e2c8f89d62b","sha256":"4fa4d6b8a1de003f0a63b5a2ff30a6f48a1c2dd2733bb69b0270dbb886fde974","sha512":"caae7533a75c1d5b391ca9c4ece62a4695dc85057b78621e0e147f0f47c6256fda2a7ac3dbf6f39e18d2ffa1e90a46b5a12dbee35e27a67477d9496618c94a23","ssdeep":"49152:RyMoeClcS1BJhEnVOs1jC2YyJckfHao53DIWtKHbaO2aBGfWMiBoqSdxbf:RWxJhEnVkyJcUO2hl","tlshash":"4c957c8073a1b479579712e4547b0500f339a85a600dc0bcf6ece8f6ef99989897bf39","size":2040185,"data":"","first_seen":"2026-03-07T00:56:18.511405Z","last_seen":"2026-03-07T01:12:31.6637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3twJwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://heleket-payment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 16:48:11 GMT\r\nexpires: Thu, 04 Mar 2027 16:48:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:07:53 GMT\r\ncontent-type: font/woff2\r\nage: 202057\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14888, version 1.0","md5":"b1c8a895f5fd3fe6cbf5b4cf95c58d87","sha1":"d32f0e0701ac62043840131a800ce717a86e4ee2","sha256":"01d285447409c8a588692162439a038b8cbd7871309ee20267b0d2d91c6e8e22","sha512":"8e5f116c757f033e001d1622798ef0e689d860b6e4102c6d760398ebe653c6ec257bdcee0d8ec1ca7cf5663269ae36b79f8d44b5a0a81298c816ac5ed9a020ed","ssdeep":"192:0oK9+lgWZm57bYBeze/iw+Lp3HIpY4uY8rHcT1DHC4cIIK/Cgb2n5ZXwMEBHr5F3:9K+nro0uYQ6cECVnTXwRtQnyYS5qb/f2","tlshash":"f962be3785690217eb1df96f6133e205ccdede83877bc23262b2955b01cfbea5019255","first_seen":"2025-09-19T17:22:27.509445Z","last_seen":"2026-08-08T02:42:20.535115Z","times_seen":1916,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":183,"dns":1,"connect":8,"send":0,"wait":8,"receive":1,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F63fjptAgt5VM-kVkqdyU8n1i8q1w.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://heleket-payment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:54:42 GMT\r\nexpires: Thu, 04 Mar 2027 19:54:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 190866\r\nlast-modified: Mon, 15 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-08-08T02:48:04.600482Z","times_seen":3296,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":202,"dns":5,"connect":24,"send":0,"wait":8,"receive":1,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/favicon.ico","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:48.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket-payment.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:39:09 GMT","end":"Wed, 03 Jun 2026 09:39:08 GMT"},"fingerprint":{"sha1":"6B:43:C5:53:1A:52:F2:AA:2E:E5:86:33:7F:0C:BE:1C:54:40:0A:EB","sha256":"76:8E:32:B8:95:2C:B1:9E:E9:8F:79:3E:38:C8:48:52:AA:10:6D:07:2D:4F:B1:AA:26:3A:17:2A:01:BF:91:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: heleket-payment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 00:55:48 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xKl2Z5apydWIz42WmeuDWJd461tRygDpKKbnSdb2q8oWC0qAnlkMYMJqaQTHpc%2FjdHULoLj28gNsaDsMZtGiIBKCyEbHtL%2BN0HGnCzS6s%2BJsS2A%3D\"}]}\r\nlast-modified: Thu, 05 Mar 2026 13:33:41 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 07 Mar 2027 00:55:48 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"69a98635-ebe\"\r\ncf-ray: 9d85a2fe39a232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3774,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 28x32, 32 bits/pixel","md5":"60408ec4dff0c9bd0931fc4837a87491","sha1":"e4355818e9e03a2ae8d6fb2c4025e808bb30b091","sha256":"fd6af3ab4435c2dd7fe657debddd1345a70c76978f479a24ce9d5b05d89da7d8","sha512":"e64b8b2d3a8c86c047304694e4d2198cd9afb6439720d34b377e990e9adca2d0da7a32da5c77f1f5f5b97119e4ce80e149a7979b65b5dc6f583d69b7a3af4d8d","ssdeep":"","tlshash":"2671388b21066b2cc62b4536a62f5f42f045ebdd2ccd8f7d1c14cfa3424ba1a0a759b9","first_seen":"2025-06-23T12:34:12.370012Z","last_seen":"2026-06-04T23:20:57.221493Z","times_seen":35,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T00:55:46.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket-payment.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:39:09 GMT","end":"Wed, 03 Jun 2026 09:39:08 GMT"},"fingerprint":{"sha1":"6B:43:C5:53:1A:52:F2:AA:2E:E5:86:33:7F:0C:BE:1C:54:40:0A:EB","sha256":"76:8E:32:B8:95:2C:B1:9E:E9:8F:79:3E:38:C8:48:52:AA:10:6D:07:2D:4F:B1:AA:26:3A:17:2A:01:BF:91:09"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heleket-payment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 00:55:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 05 Mar 2026 13:33:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udbizYSvj2g8V8zDTdZcAG6tNjCOkb2y0BI10zPPAQV3AFJAfgJzHj6TPTpds0StYTdX%2FY5lUdG4TzmJFjaAAdaaZhA3mCQ4m0RwG22XkAkdCEY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d85a2f55c77dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":809,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d746f607f4c879c3d4f03ad5b151ac62","sha1":"163baf5db3913b124ac25947e41629dc70e0e6df","sha256":"0a85f11cc72ecc12a85c6648012888d08395229af9ae592f75f0b392f301b97b","sha512":"bd23ec2e9fd4ce02b841e73a3ba63922caa1ce8a5923585541283fcc131283222dfc29b16c923a06a0933ae19993088ef0b87315b0a14c344bcfc54b5575fdf3","ssdeep":"","tlshash":"b001209264a0c805131043a56dd1f82ded03d64f0b88da8872fb40b9df943d28adf96c","first_seen":"2026-03-07T00:56:18.500209Z","last_seen":"2026-03-07T01:12:31.659574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":39,"dns":20,"connect":1,"send":0,"wait":94,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tronweb@5.3.2/dist/TronWeb.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"167.82.37.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/tronweb@5.3.2/dist/TronWeb.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"10a5b4-lT+k7SLU5o7soi6j1EqFcCf59GA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1099976\r\ndate: Sat, 07 Mar 2026 00:55:47 GMT\r\nx-served-by: cache-fra-etou8220057-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 250648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1090996,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"61815c53518e149c598d8d4e8c540f1e","sha1":"056b4b1e8ac8e4b1bee20a121b5bb13eebf70dbe","sha256":"2750da4ca28f2302169db18f17c1dc671ec9d0d8eb3e93a8a9a4bb93778f6209","sha512":"1eb3371d59a1c018c0ebc9c9c10bf708720e85d5355ed42ed941459a43a81abba537767a20cf0782905da678e9be6961099f465b5aa4dba03766819b394f423c","ssdeep":"6144:y+WOYV+9x9JXV2vCRoIqbt15LAVbjsRyK2ZU13U+wZ/qpY9lgmpuLWiLyUvPDgeE:rYVi9eIqbtvLAVbjsUKyqGSWYC493KYS","tlshash":"4725098876c6f166439220e0053b640eb23dbb5cd45ca554f398e4e37df9ada872bb34","first_seen":"2026-02-01T05:32:39.423634Z","last_seen":"2026-07-27T07:51:47.175632Z","times_seen":13,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":55,"dns":0,"connect":28,"send":0,"wait":28,"receive":86,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Mono:wght@400;500;600\u0026family=Unbounded:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Mono:wght@400;500;600\u0026family=Unbounded:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 00:55:47 GMT\r\ndate: Sat, 07 Mar 2026 00:55:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9643,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"807727898386ddbcc857df46c9069555","sha1":"08e76bbd6b2bc94a31f01aa92f19f55379edc620","sha256":"7ec384391aa39b7637fcc85d9cc2d83cd371526e70d3491df0a56d29a20b478f","sha512":"b4bd8704a6bf4fb8b1915843a9027eb40c5e58cffe5ec3a85be1f8b11668a0af19cb98c42048ca3fe0f7a89cddb42dd5ac0e76344d72805625076a2363e784f5","ssdeep":"192:ZYpZQxFPE26Bs3U3IFvXesa4GhqV3d2I8N4VJdsy8rc:a3QustusLtFL3","tlshash":"7712cb91406ba500ab430cc133cfbf35ad8e62953446c579affe2ca49dabc361369b1d","first_seen":"2026-03-07T00:56:18.502814Z","last_seen":"2026-06-04T23:20:57.223786Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/logo.png","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket-payment.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:39:09 GMT","end":"Wed, 03 Jun 2026 09:39:08 GMT"},"fingerprint":{"sha1":"6B:43:C5:53:1A:52:F2:AA:2E:E5:86:33:7F:0C:BE:1C:54:40:0A:EB","sha256":"76:8E:32:B8:95:2C:B1:9E:E9:8F:79:3E:38:C8:48:52:AA:10:6D:07:2D:4F:B1:AA:26:3A:17:2A:01:BF:91:09"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: heleket-payment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 00:55:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 11836\r\nlast-modified: Thu, 05 Mar 2026 13:33:41 GMT\r\npriority: u=4,i=?0\r\netag: \"69a98635-2e3c\"\r\nexpires: Sun, 07 Mar 2027 00:55:47 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=naAQJcntyvHUPhpH77Zyr21iFZouDpplqsSdevYOSHiWnCTpgzJuTIE8QmKuLJBMSMg8W7fgHFZMnX6qkB8XOA4RJL7NW7vue06ViQgqardVPPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d85a2fc695632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6e262013ab3f2d7def6c93d432db22d0","sha1":"62d7e50ea27c79732bd4e5ac09edcf7831fb5083","sha256":"c815bcc14be6394bf9d672d0c7b9a1efa5ab4159834d7bc9265579439e53649c","sha512":"9c359ff522c0dea96fbc9d3e8dc0607e3a7c3e1cff24fdd64575e408e7af49fb1033d7768f8ffc3e00e0b0d169e95f001650cbc8bc3b105133ef5847c68b43e2","ssdeep":"192:fc63AnQ1/xn4ZgS/dEtuCbEwUM0MuZx22GOmNv1aEsXTqEIfOQAQYL2ZNuZ4kTBI:fcsEQtxn4mSMREw1uZrs11arXTqjfOQ3","tlshash":"0a32cfb1137258e70deef68b7801f508777ac334e4e2259a22cc69eef49c6258c5012b","first_seen":"2026-03-07T00:56:18.503691Z","last_seen":"2026-03-07T01:12:31.657849Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/unbounded/v12/Yq6W-LOTXCb04q32xlpwu8ZfvRQkSJZH.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://heleket-payment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 50928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 00:24:28 GMT\r\nexpires: Fri, 05 Mar 2027 00:24:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 174680\r\nlast-modified: Wed, 10 Sep 2025 16:47:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":50928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50928, version 1.0","md5":"05d155aeb9312622bb55344a904c67a7","sha1":"7179f28585e79eb649070109ff59446ae8cadacf","sha256":"4b69ae920ef9fb5868c8255f5176e799e96d820db11a9e23da7de2ffd2af190b","sha512":"ce6260761e9fbaf82c95fe980b4bacc4dbbc96aecee4e5b70f7f57db488b29f7351c9a047be5a52de94a1e1bf05ffda15b4bd1ea59597d070ceda52ce51641d4","ssdeep":"1536:YavAFuYIsPewmVKgN/gy2DOZfOlgJeQ9nc:YavAcwmVK8x2yZf4gJeQ9c","tlshash":"2733028520f7291fc67232b74f68aaa4347163dea531d18e320970c8e9c665e6e3193a","first_seen":"2025-09-11T17:16:41.899057Z","last_seen":"2026-08-08T03:40:06.604535Z","times_seen":268235,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":106,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/ibmplexmono/v20/-F6qfjptAgt5VM-kVkqdyU8n3vAOwlBFgg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://heleket-payment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15620\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:23:44 GMT\r\nexpires: Thu, 04 Mar 2027 19:23:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:44 GMT\r\ncontent-type: font/woff2\r\nage: 192724\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15620,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15620, version 1.0","md5":"5a2ce7798732476dec03a9561de231fe","sha1":"ce9a5ca3a874da9201c2630c5cb7bfaa9688c052","sha256":"0d1f0b8d0722224e32e9f28261bdc86c79115be73444ae5eceb73976a1bcdf83","sha512":"5c4ebd97feaabdb478b615990f286b114ee3b76ce43dfe4122b4e6ec998ae3d4110a4a893b65f6ba81c25da0d3ad7e5a5221fb8c8efb58e5d06e9b3c890f9832","ssdeep":"384:AcHslrQJgsgNQhzVr/oaqSeH04dAM4PmV:7slrULvz9/NqSZLZOV","tlshash":"4162d010270e7176dc461378dd56c9e30476ffbec8120f6b7e91a9a258c5fd4722127a","first_seen":"2025-09-19T17:22:27.512197Z","last_seen":"2026-08-07T23:18:53.579593Z","times_seen":1904,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":88,"dns":3,"connect":12,"send":0,"wait":17,"receive":2,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Golos+Text:wght@400;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Golos+Text:wght@400;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 07 Mar 2026 00:55:47 GMT\r\ndate: Sat, 07 Mar 2026 00:55:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5904,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"228432a495d8c423b9e11fa98d882f7c","sha1":"95d8dd9aa663579111bb40f98c88cb050880bcc3","sha256":"6b3fab7d0a0529ab23bfeed0784cd6d2e1c26136c98c4c9d2c7b58b3cf085b9d","sha512":"4bf203230ae8b45dc43b1d6be6f6d88e5830dc716b5792a463b6c01dc856c155d51b2f18d2b07251dae88f57ca51af744d136a505c3bc9a849e3a5c22cbb5c07","ssdeep":"96:vOEaJfOEagFZGOEa4Jc+usOEa1N8OxMaJfOxMagFZGOxMa4Jc+usOxMa1N8OpaJ/:4JoM8a1JSW8QWJB183XJUw82E","tlshash":"b0c1e291852b9e00eba31cc1a3ce7e73ae0e51093400c5758efd08a8ac9ec360395b5d","first_seen":"2026-02-12T21:01:59.184439Z","last_seen":"2026-06-04T23:20:57.214937Z","times_seen":16,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":146,"dns":1,"connect":27,"send":0,"wait":47,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/assets/index-DbmtYx_D.js","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket-payment.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:39:09 GMT","end":"Wed, 03 Jun 2026 09:39:08 GMT"},"fingerprint":{"sha1":"6B:43:C5:53:1A:52:F2:AA:2E:E5:86:33:7F:0C:BE:1C:54:40:0A:EB","sha256":"76:8E:32:B8:95:2C:B1:9E:E9:8F:79:3E:38:C8:48:52:AA:10:6D:07:2D:4F:B1:AA:26:3A:17:2A:01:BF:91:09"}}},"request":{"raw":"GET /assets/index-DbmtYx_D.js HTTP/1.1\r\nHost: heleket-payment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 00:55:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 05 Mar 2026 13:33:41 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69a98635-1f2179\"\r\nexpires: Sun, 07 Mar 2027 00:55:47 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VdaenXXndjHNMECdwRe9h9Us4xGxnrInunqP8tlHkneJ4bt0QHvCHJl3D9FxMFCvO8jIKFSWozzFO9LQzFvq%2BN0jJ5sfhvnOESBFFaQ%2BbwRMiEw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d85a2f77f8332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2040185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6bb1e1e26e0a1e3e11f5f709edb7d5df","sha1":"94bc9e64cc7060e33dabb132216e3fed107590d9","sha256":"b07dc44d9ae0102b6dbe38bda5d568250d4eac63b4147b9e86b56f61778e76d8","sha512":"206a72e4af9d920c0e7b026d9557de4de34f612cbf78a3d8eb15a4d7c9f5b28b72c5127a3019986ea748153191e49c6897f38850e072e27cad4fa0e5c9fa9903","ssdeep":"24576:RwSyMoYUSClcS1BJCWXUnVdcrAuIjC2YyJk/kfHau:RyMoeClcS1BJhEnVOs1jC2YyJckfHau","tlshash":"dd255d8072a5b075439a55e4543b1145f33db85d340980bcf6ace8fbbfa9885aa3bf34","first_seen":"2026-03-07T00:56:18.506532Z","last_seen":"2026-03-07T01:12:31.660143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heleket-payment.com/assets/index-B1LFL99U.css","fqdn":"heleket-payment.com","domain":"heleket-payment.com","tld":"com"},"ip":{"addr":"172.67.180.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heleket-payment.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 05 Mar 2026 09:39:09 GMT","end":"Wed, 03 Jun 2026 09:39:08 GMT"},"fingerprint":{"sha1":"6B:43:C5:53:1A:52:F2:AA:2E:E5:86:33:7F:0C:BE:1C:54:40:0A:EB","sha256":"76:8E:32:B8:95:2C:B1:9E:E9:8F:79:3E:38:C8:48:52:AA:10:6D:07:2D:4F:B1:AA:26:3A:17:2A:01:BF:91:09"}}},"request":{"raw":"GET /assets/index-B1LFL99U.css HTTP/1.1\r\nHost: heleket-payment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heleket-payment.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 07 Mar 2026 00:55:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 05 Mar 2026 13:33:41 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69a98635-12a6\"\r\nexpires: Sun, 07 Mar 2027 00:55:47 GMT\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KqJ4%2Be3A0sdzAby2N7YfErRxewK7VkwjGiNX1MonxcPf%2BaG5A0E0e1snfFt4UDPjwb3DvoPBlElJ6WSVj6AB7DWL9nLmgHMLIAcG%2B6EM8%2BzZCzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d85a2f77f8532fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4774,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4773)","md5":"f01b4f6b6cccfdcaf6d41c8f4a007f65","sha1":"b82a458b72e158b3243f16f6f20b3bca1c705262","sha256":"d6bf87fef16cb11d61590db2f45f59d0bd3160db2df5aa6246f67c4408c6a7fa","sha512":"7a2d3a4e4fcf9fcdeda627596c72fe1ef30f3258dc1ba7ad50ca92038285e205e352d2025e913de8d9a9ba95c73553db7710c8a9d32d64527c0e5755d33dbc82","ssdeep":"48:LYK+kf5FpTygAqyVUvzqSVUUEkJh5eWQ/qDUkdtsDABLVuhJ6ZW3K5PmgWKoEf9q:LY16FBTJrxVvEkdzk1kdOgLIn+5X9jW","tlshash":"47a12321b11e921ff337cd597586d6db6024fbd7d11307bd6ea23124c88f0663a2a355","first_seen":"2026-03-07T00:56:18.507518Z","last_seen":"2026-03-07T01:12:31.655559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"heleket-payment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rpc.walletconnect.org/v1/supported-chains?projectId=8a2d09d6aead719551b3cd4fc3e6f209","fqdn":"rpc.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"3.120.100.65","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heleket-payment.com/","date":"2026-03-07T00:55:47.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rpc.walletconnect.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Sat, 14 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"38:E6:43:A0:F8:F2:8D:21:9C:36:21:F5:DB:3B:F9:93:F7:7B:C4:8B","sha256":"09:1F:96:1E:4B:E3:8B:06:C3:8F:0A:2E:0F:79:E7:43:9C:B4:45:CC:26:0C:77:C5:50:CD:15:A8:7D:1D:83:DB"}}},"request":{"raw":"GET /v1/supported-chains?projectId=8a2d09d6aead719551b3cd4fc3e6f209 HTTP/1.1\r\nHost: rpc.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://heleket-payment.com/\r\nOrigin: https://heleket-payment.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 00:55:48 GMT\r\ncontent-type: application/json\r\ncontent-length: 1310\r\ncache-control: public, max-age=86400, s-maxage=86400\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\nx-request-id: 96ceca2d-8716-48a2-a178-bb6cd6673d53\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1310,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d943f2d1579c6fe1ebe1908415504f32","sha1":"e8684bf8fe5717c9d2a3d48bd80b59bc3ecc0ab8","sha256":"2ea209b943ae28d2478824640ab439efa35b4c4827faac9087c02359e3dba7fd","sha512":"bbcd976d6d666a63d216dfe74c72c79fb58297d5826c9f3dd52c37aedaa73e7257f83d677465dc73010cdb328e463dc932ae8d8a27ab1ffedd551be1d34ee21e","ssdeep":"","tlshash":"df21548c84800840dcb0d398d7bce8cb846ef01399cd289999f82cb055bd6a3355236e","first_seen":"2026-03-07T00:56:18.508385Z","last_seen":"2026-03-07T00:56:18.508385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":232,"dns":31,"connect":21,"send":0,"wait":23,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}