{"report_id":"192473bb-62c2-4f01-9d43-92d33c21b1e2","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-09-27T02:56:20Z","url":{"schema":"http","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"title":"Netflix","dom":{"size":9619,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8336)","md5":"f6486ceb055326ae77e13823e3e87b39","sha1":"efb297bab5cb2e8a8c016083b484caf1c7e89e78","sha256":"8c843d78dde755c014268b37725cff7cc585089cefc028bc3b46e7779a16b8c7","sha512":"d5fe24ee95c3964ce46f4896dfb3ed13aa5ff5da47f6fbda51b5f0fc5df2a094abf33506775fa86b5b531f64ed4d7157cc2659796fbc4ca3fd17c275614f3989","ssdeep":"192:G/2aZuAEnyW+sPp2ZRENUAkLBIvtPIjFZJONvCeilkG6Ntp2ZRENUAkLBIldHH:DEuvjLP+FZJONvkkG6ND","tlshash":"6e12d8b45961cd079c77699ee43daffd419a8e2bfb11983871ecca00238adf80646d91","dom_hash":"domhash283fc55c8c1e4298f3db1ef49ed41998","first_seen":"2026-09-27T02:56:36.303252Z","last_seen":"2026-09-27T02:56:36.303252Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:56:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"newassets.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":29228,"first_seen":"2021-03-22T10:55:22Z","last_seen":"2026-09-24T00:03:48.912696Z","alert_count":0,"request_count":3,"received_data":2339417,"sent_data":2079,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":28177,"first_seen":"2021-07-31T14:27:15Z","last_seen":"2026-09-24T08:07:13.625594Z","alert_count":0,"request_count":1,"received_data":1418,"sent_data":904,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.hcaptcha.com","ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-12","domain_rank":44433,"first_seen":"2021-07-30T11:51:37Z","last_seen":"2026-09-25T14:52:30.217992Z","alert_count":0,"request_count":1,"received_data":357735,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cc3cf723c7bf.w.hcaptcha.com","ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3314,"sent_data":491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"5656794e2f8b.w.hcaptcha.com","ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":3314,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hfgrgjht.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":10,"received_data":388040,"sent_data":4791,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"57caa2466f228b440d0b002cd5571a7f","sha1":"3ec5e7ab035cff9b9980f5d76725292ed8f2c970","sha256":"2a3a206da015d06d08afe53b6e4c07ef984568def245e68a8a6545425c1242a9","sha512":"4d12fe5650450d9184404db716fdbc00f6f015d7c154e6c389c526e8ce1fb92fcacc1bde969a53bbc528700d2d2b7e680ffcd473c54a185ac3fc7a51958252cd","ssdeep":"","tlshash":"4e9004d570c75400cfd3135c10571cc5547c4c7035444fd44070d5511f55030511545d","size":40,"data":"","first_seen":"2023-04-14T01:04:24Z","last_seen":"2026-09-27T11:21:15.267586Z","times_seen":71408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","size":14205,"data":"","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-27T02:56:56.537058Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f08ca05429ae5c4ca791e583159607b4","sha1":"875045f4d467ddb9f15692bf1c1bd8ab1db55f64","sha256":"7bd995c533b1f63ae8ddafac3faeb7cc59b312d832f4b9606e4fe3056406d58e","sha512":"74e0a66d675c8a9cf4e2f64f68b374878db64b2366d8f7502358f3f8961cecf2defaa90d7dad262bd780f7c136dbd742287b6efa94877f41403ff54cb0e3dc64","ssdeep":"","tlshash":"5681b7ed7161f9b9178350e1403fe056f63b24b2295ee4a0ca19d8f8fc349488513fa9","size":3996,"data":"","first_seen":"2026-09-26T12:56:03.91756Z","last_seen":"2026-09-27T02:56:36.308813Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0db07dafb93cbabf64b5bb5e1541e0e","sha1":"1bfa982cca5ce762b82267ab8783ddf26e1ebf05","sha256":"25f6465bc04537c305563e229e2d3567f30d3037c7b38ccaf25aed902e2fec6c","sha512":"c8b697b624b6334266a401aa6351734de7487340165620e5f8e8d861f1c87da70c269775dbc811d2bafa5c4af6768e73100356463c4e56d4f34e2387ed16dacc","ssdeep":"6144:7wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey9:sIyva1Z0s6iPUZR9","tlshash":"54d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","size":627094,"data":"","first_seen":"2026-09-24T16:09:41.847403Z","last_seen":"2026-09-27T11:21:15.272619Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-09-27T11:35:34.690337Z","times_seen":107099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4722e3658d82db61e6e87b4a6cfb82a","sha1":"cedbd1c9f983cbe45e77c489e2c897b2d8ed9591","sha256":"7227ee53dc12dea75e5e7651ba56e7bd1ca7a2d12d4ddbd4dfa2457cbca2acd5","sha512":"e1264c1a18aa58ce059cc04e27c172fd6247544da1244b50b9e4b1d8feec82136686c52f5c500ab91d9c79df4d6a6871f7dfc51a03a4f497b68736c5de5a62c5","ssdeep":"","tlshash":"68a01298d041dc1ac130000704284800c2ccd40c03a0405413b4cac68001c781684d85","size":86,"data":"","first_seen":"2026-08-22T02:28:37.827075Z","last_seen":"2026-09-27T02:56:56.551786Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"586f9f0bba3cc4bf922569b72f35b577","sha1":"b4f0de918db9e5fbab61dc9d9bb5a53d1d26c18b","sha256":"1db8f3abab350f71c57cb58d18de2d7d4de11bad8abdd41b408aabe520e1ff99","sha512":"84047e8c0e3b95fa591e2ea1e9aa5df4815867bf30ddf46eb28c6264b151bf0e374a0b768628e2e437fba8560f17fe01231c7dcaa54c8988cab23d209fa15b7e","ssdeep":"","tlshash":"71417b7e9541dd8bdcbd3d99463e9c3664cc8c7b1761c9b881dece0817054b927dad80","size":2020,"data":"","first_seen":"2026-09-26T12:56:03.947069Z","last_seen":"2026-09-27T02:56:36.320998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7206db1994b57e639a1f8bd6bd39a9","sha1":"2073aaa88feb224242b5b6f46571556c6a006551","sha256":"ee98c27f81a1d9566d593e9e163c6469af170ae964dec966e8305c724fc01483","sha512":"54ea96a8d33ac3afc88fc9ef34975a7630a8f082aea24f424d8cd320f9a9dd2ca2582bb36825aebcdddf8e35dc16b834c673d0d962b132cecc1a7eb9332f9a8d","ssdeep":"","tlshash":"b4e0cd619c01dd1dc75b5f651c3f1c7920ddc3794245964699c4dd140943e754af2ec5","size":316,"data":"","first_seen":"2026-01-13T00:15:05.629311Z","last_seen":"2026-09-27T02:56:56.553714Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-27T10:31:20.749616Z","times_seen":5179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-27T11:47:09.193842Z","times_seen":435332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7df22b1a05fbf93eea23a0f998a5ce5b","sha1":"23687e27df2f3d2753a9206cd4a77c1e04600ffd","sha256":"3165b72c1b09a822a4e395b85adcda0748797e0c56c5ff4433b6ebf3734cbfee","sha512":"6e397541208e52483e633463c6a4412ba8254b2e75a66ae2cb204f3cdfdd96bb0d962d3f967223a470eb577b649826dfe9353c136deb54e2f7b432b8595aa5c6","ssdeep":"","tlshash":"c2a024d454d7d01003fd011410157441f4fcc4731344cd704030c4330f7403103444cd","size":74,"data":"","first_seen":"2025-01-09T03:11:45.291974Z","last_seen":"2026-09-27T10:41:40.815785Z","times_seen":66686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"542047d5519f8f7786da3347cacd50f1","sha1":"26126775ecd7dc31220350803c52a7906f5b7f84","sha256":"044864a3a23637e127e34fb229fb61ad454086cdcddc913be30cf177d1808f2d","sha512":"a95b0d5e19779e50e983254ac5cffb26bd6f0245baf36a4d931a9c8edfdba26ebcc7e331a13c32504e6002f7a8d5ee3e353fe6d85d2340f9eb90c38498b7f78b","ssdeep":"","tlshash":"699004dd34c370104753115400571cc4f074dc70144c4d40c04cd4511cd5030711d45c","size":39,"data":"","first_seen":"2023-05-12T18:19:29Z","last_seen":"2026-09-27T11:21:15.273202Z","times_seen":4076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=checkbox\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0db07dafb93cbabf64b5bb5e1541e0e","sha1":"1bfa982cca5ce762b82267ab8783ddf26e1ebf05","sha256":"25f6465bc04537c305563e229e2d3567f30d3037c7b38ccaf25aed902e2fec6c","sha512":"c8b697b624b6334266a401aa6351734de7487340165620e5f8e8d861f1c87da70c269775dbc811d2bafa5c4af6768e73100356463c4e56d4f34e2387ed16dacc","ssdeep":"6144:7wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey9:sIyva1Z0s6iPUZR9","tlshash":"54d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","size":627094,"data":"","first_seen":"2026-09-24T16:09:41.847403Z","last_seen":"2026-09-27T11:21:15.272619Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-27T10:31:20.741808Z","times_seen":1933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2943d90ba97fbbfc8cd5053eeb63caf1","sha1":"634102e6338844d31321dd6a7e89be148c783473","sha256":"8cd4a062781f58a058a8054b82de9ba17c991d7818337a497c43337022c1c398","sha512":"68c21003f8a209f716eefc248594cc7d6ce5f7fa99480b919c54823b9f8331a62c34d84ddaeac346104f634245bddbc15a591b33d98e8e3e5003b314113a2db3","ssdeep":"24576:NquLytUVwAHdIg6lBzHYKyqty0AsY4AiiOtc/n6xzdXfY0pYX:N5Ig6lBDcr","tlshash":"a3353b7f5301aebbebb65579054a3d4b2d48046342a69ee4cd8e88f3a8811ffc4954fc","size":1079267,"data":"","first_seen":"2026-09-27T02:49:47.223602Z","last_seen":"2026-09-27T02:56:56.548308Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d783f62c9cb4705d2068bfade4ced76d","sha1":"d4431990ade0a3e558ec3be9e299f6b61f82d2ab","sha256":"d747b6beef0ca7b2f71c4b44aef67dd962f9c9f903195a2ac1a835d2ed5c343c","sha512":"42c4f257eb120e2c92bb7a756a76fc2e38d734a6852c3fae8b2f9774d655953af5184ed3cbe27b0e496ae4c3ad82aebd51f6b566117ab545c9d7566cb42429c9","ssdeep":"3072:RwPGndFHHeP+u4RCZMfubd1mWhor7C/jnLyZRl6PS:RwPCpy+uS2bd1mWhorernO","tlshash":"e3744f7f2315526f62f402d140da931b67f5c436202c605eafb3aceebc5ca4724796ba","size":356869,"data":"","first_seen":"2026-09-24T15:36:58.241465Z","last_seen":"2026-09-27T11:21:15.26372Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-27T10:31:20.750134Z","times_seen":2611,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad0b796ed2af68e4a9427ce47fb8f1f","sha1":"5ba87d76dbec72159a399b970fb3fd7b2ad0f2eb","sha256":"22097bb91b759c4929711ff5ba50549d2cab61ff0c36cb371ce3ac5f110a5e17","sha512":"bd14ddb4e17c9432a19e1bd687d61750d9f0a5d69a8c4ed284b0410b70a5e76a29b59cb5aee53f3f47c56ad28ee092a485882eaaae169da21167c075c3492f96","ssdeep":"384:4Hp1JSk5hwNgtHZ9EqInwWvpAk0/vWZ8bKuSLrIUvVzMVRLtkuebqLeU0v1/z0v/:sgg39EqInwWvCk0y8bKBIUvVzMVRJVeY","tlshash":"22a24ab5b291f4782a721971913f484ee33f5b39dc0ec028f568f9d636645c8a12afb4","size":22408,"data":"","first_seen":"2026-08-22T02:28:37.820493Z","last_seen":"2026-09-27T02:56:56.543837Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/117-fbea2f3157fb49b7.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.888Z","timestamp":1790477746888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/117-fbea2f3157fb49b7.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 270628\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-fbea2f3157fb49b7.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"d13e87eb771cb1dc6c862544c92dd720\"\r\nlast-modified: Wed, 23 Sep 2026 23:45:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/117-fbea2f3157fb49b7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::77s5p-1790477746894-741a027da89d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124364,"size_decoded":33553,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-09-27T10:31:20.750134Z","times_seen":2611,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.897Z","timestamp":1790477746897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 261287\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-8bcc90ceeb914f5c.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"5ad0b796ed2af68e4a9427ce47fb8f1f\"\r\nlast-modified: Thu, 24 Sep 2026 02:20:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/app/hcaptcha/page-8bcc90ceeb914f5c.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4b9c-1790477746903-539e47f07ccc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22408,"size_decoded":9241,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14925)","md5":"5ad0b796ed2af68e4a9427ce47fb8f1f","sha1":"5ba87d76dbec72159a399b970fb3fd7b2ad0f2eb","sha256":"22097bb91b759c4929711ff5ba50549d2cab61ff0c36cb371ce3ac5f110a5e17","sha512":"bd14ddb4e17c9432a19e1bd687d61750d9f0a5d69a8c4ed284b0410b70a5e76a29b59cb5aee53f3f47c56ad28ee092a485882eaaae169da21167c075c3492f96","ssdeep":"384:4Hp1JSk5hwNgtHZ9EqInwWvpAk0/vWZ8bKuSLrIUvVzMVRLtkuebqLeU0v1/z0v/:sgg39EqInwWvCk0y8bKBIUvVzMVRJVeY","tlshash":"22a24ab5b291f4782a721971913f484ee33f5b39dc0ec028f568f9d636645c8a12afb4","first_seen":"2026-08-22T02:28:37.820493Z","last_seen":"2026-09-27T02:56:56.543837Z","times_seen":14,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/logo.svg","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.903Z","timestamp":1790477746903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 283492\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"c905c3b37c2c591f2beb56f5f3eb136e\"\r\nlast-modified: Wed, 23 Sep 2026 20:10:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4b9c-1790477746908-d3bf2d1f17db\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18259,"size_decoded":8776,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c905c3b37c2c591f2beb56f5f3eb136e","sha1":"01f46cfeb0a788d81bf98ff696cf3632a03404b6","sha256":"f45548a5194f4c9a8306f65111c54e15142315151d5a0934443be64d258f123c","sha512":"64da790e9a2ee5554b3ebc8caba517ab8e38c51e4a4dae48badfdc1541f8af08868b2b4459fcaf83bd5ea8c75207ed8e1f308b9228213e30c74b996b5b95f744","ssdeep":"384:OAU9qSSPZTnpZji3lqyJiRRVKbU7MPyYmA8lL1rXK:ykPZLDi3lPJibVKbw0ilNa","tlshash":"6c82f9dd736488f8cc0ed7c2ada258e43e5b60b72f85c22cc969e791152316dd98acc7","first_seen":"2026-08-22T02:28:37.821801Z","last_seen":"2026-09-27T02:56:56.533144Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=checkbox\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:47.225Z","timestamp":1790477747225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=IsOqOPp3TGcjKD3f5EM.PMea4xFud6UDrHSLr8uGSso-1790477747.2279763-1.0.1.1-JN4pPZY93FkEd293Dm53CDQCeJUshscVkSPkXrW93T8GvBTno2p82UfmPzzhOihO4Neie5uTjPrAK1KXdEug_nfHpHj1ERJjXokO9wYwzAgOFQB2JZGu.I2tCMQtuzpU; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT\r\ndate: Sun, 27 Sep 2026 02:55:47 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a4173b402bfba0f0-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"IsOqOPp3TGcjKD3f5EM.PMea4xFud6UDrHSLr8uGSso-1790477747.2279763-1.0.1.1-JN4pPZY93FkEd293Dm53CDQCeJUshscVkSPkXrW93T8GvBTno2p82UfmPzzhOihO4Neie5uTjPrAK1KXdEug_nfHpHj1ERJjXokO9wYwzAgOFQB2JZGu.I2tCMQtuzpU","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:25:47Z","raw_expires":"Sun, 27 Sep 2026 03:25:47 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=IsOqOPp3TGcjKD3f5EM.PMea4xFud6UDrHSLr8uGSso-1790477747.2279763-1.0.1.1-JN4pPZY93FkEd293Dm53CDQCeJUshscVkSPkXrW93T8GvBTno2p82UfmPzzhOihO4Neie5uTjPrAK1KXdEug_nfHpHj1ERJjXokO9wYwzAgOFQB2JZGu.I2tCMQtuzpU; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":628846,"size_decoded":192079,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"92f99ddc466a768d1b2af964b57ffb84","sha1":"7085051a4ff2cd894091f45e143485249ab9ab15","sha256":"04e6751b502f3e0ab603b386100b23ac25e7881d3728fb00161c0260b541c33d","sha512":"11e3182bdc97af19c7d735df8e492ba4bdc38003aa10f10811002cd76fe25f4206a66886155aee55c7f0e9e28f402b918719f018e3e8bbeb3ae1ecd1319f33f1","ssdeep":"6144:5wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey8:yIyva1Z0s6iPUZR8","tlshash":"91d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","first_seen":"2026-09-24T16:09:41.47706Z","last_seen":"2026-09-27T11:21:15.258049Z","times_seen":245,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.hcaptcha.com/checksiteconfig?v=33e17445452ab4888e3f4665a714b729e48a7a2e\u0026host=hfgrgjht.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026sc=1\u0026swa=1\u0026spst=0","fqdn":"api.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:55:47.637Z","timestamp":1790477747637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"POST /checksiteconfig?v=33e17445452ab4888e3f4665a714b729e48a7a2e\u0026host=hfgrgjht.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026sc=1\u0026swa=1\u0026spst=0 HTTP/1.1\r\nHost: api.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/\r\nCookie: __cf_bm=IsOqOPp3TGcjKD3f5EM.PMea4xFud6UDrHSLr8uGSso-1790477747.2279763-1.0.1.1-JN4pPZY93FkEd293Dm53CDQCeJUshscVkSPkXrW93T8GvBTno2p82UfmPzzhOihO4Neie5uTjPrAK1KXdEug_nfHpHj1ERJjXokO9wYwzAgOFQB2JZGu.I2tCMQtuzpU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 27 Sep 2026 02:55:47 GMT\r\ncontent-encoding: br\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: https://newassets.hcaptcha.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncf-ray: a4173b42cc13a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808,"size_decoded":1239,"mime_type":"application/json","magic":"JSON text data","md5":"b7b615f3d5a3b61617b134c0b7a7eb2a","sha1":"40e2d14a142450f263a79f9fed8e8882176c38d3","sha256":"86364b9355f3293f9537775ab8f9c3a9b24860517c00ccece3262809b493476d","sha512":"528c8adcebecddf53d872d6c61d4ac27839ab0a42ddb99385426643c82377a15c35b280d0cbb6ffc4965e2cc39955f722d86be3e5e654d3c9d17f9af8c3a6b18","ssdeep":"","tlshash":"540146eb63c8195ffbc5bb0a1d09671f4d15313a41a27839449efeb05a5d18c1515631","first_seen":"2026-09-27T02:56:36.307507Z","last_seen":"2026-09-27T02:56:36.307507Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":3,"dns":3,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.885Z","timestamp":1790477746885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/webpack-616e068a201ad621.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 283493\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-616e068a201ad621.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"f08ca05429ae5c4ca791e583159607b4\"\r\nlast-modified: Wed, 23 Sep 2026 20:10:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/webpack-616e068a201ad621.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zvs99-1790477746891-758ec2692917\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3996,"size_decoded":2563,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"f08ca05429ae5c4ca791e583159607b4","sha1":"875045f4d467ddb9f15692bf1c1bd8ab1db55f64","sha256":"7bd995c533b1f63ae8ddafac3faeb7cc59b312d832f4b9606e4fe3056406d58e","sha512":"74e0a66d675c8a9cf4e2f64f68b374878db64b2366d8f7502358f3f8961cecf2defaa90d7dad262bd780f7c136dbd742287b6efa94877f41403ff54cb0e3dc64","ssdeep":"","tlshash":"5681b7ed7161f9b9178350e1403fe056f63b24b2295ee4a0ca19d8f8fc349488513fa9","first_seen":"2026-09-26T12:56:03.91756Z","last_seen":"2026-09-27T02:56:36.308813Z","times_seen":4,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"js.hcaptcha.com/1/api.js?onload=hCaptchaOnLoad\u0026render=explicit","fqdn":"js.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:47.034Z","timestamp":1790477747034,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /1/api.js?onload=hCaptchaOnLoad\u0026render=explicit HTTP/1.1\r\nHost: js.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://hfgrgjht.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\ndate: Sun, 27 Sep 2026 02:55:47 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\ncf-ray: a4173b3f0b2856c9-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=sq29O1tW34tVsUEo6zgO1FmsXnJyXlsIiFlSh._9p3c-1790477747.0503309-1.0.1.1-FVUIZ3KJN0oG8M.VOuHBstx1iDauP1eKPuC2Yb7OGzBhuACDZrRhrBtHE7w32q49w17.BepiZTQfigAutHfZkcWjucvJLoF6nWxi2vCpzo_.wgqic80DeV8pMcjczjRT; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT\r\ncache-control: max-age=300\r\netag: W/\"11bfbf33fce54770b1090b81b78d96a0\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"sq29O1tW34tVsUEo6zgO1FmsXnJyXlsIiFlSh._9p3c-1790477747.0503309-1.0.1.1-FVUIZ3KJN0oG8M.VOuHBstx1iDauP1eKPuC2Yb7OGzBhuACDZrRhrBtHE7w32q49w17.BepiZTQfigAutHfZkcWjucvJLoF6nWxi2vCpzo_.wgqic80DeV8pMcjczjRT","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:25:47Z","raw_expires":"Sun, 27 Sep 2026 03:25:47 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=sq29O1tW34tVsUEo6zgO1FmsXnJyXlsIiFlSh._9p3c-1790477747.0503309-1.0.1.1-FVUIZ3KJN0oG8M.VOuHBstx1iDauP1eKPuC2Yb7OGzBhuACDZrRhrBtHE7w32q49w17.BepiZTQfigAutHfZkcWjucvJLoF6nWxi2vCpzo_.wgqic80DeV8pMcjczjRT; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356869,"size_decoded":102770,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41132)","md5":"d783f62c9cb4705d2068bfade4ced76d","sha1":"d4431990ade0a3e558ec3be9e299f6b61f82d2ab","sha256":"d747b6beef0ca7b2f71c4b44aef67dd962f9c9f903195a2ac1a835d2ed5c343c","sha512":"42c4f257eb120e2c92bb7a756a76fc2e38d734a6852c3fae8b2f9774d655953af5184ed3cbe27b0e496ae4c3ad82aebd51f6b566117ab545c9d7566cb42429c9","ssdeep":"3072:RwPGndFHHeP+u4RCZMfubd1mWhor7C/jnLyZRl6PS:RwPCpy+uS2bd1mWhorernO","tlshash":"e3744f7f2315526f62f402d140da931b67f5c436202c605eafb3aceebc5ca4724796ba","first_seen":"2026-09-24T15:36:58.241465Z","last_seen":"2026-09-27T11:21:15.26372Z","times_seen":273,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:55:47.659Z","timestamp":1790477747659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /c/730dc6d77da87c38eaa806dbc846a5129fc83ce20d3d792370504c8673876ec0/hsw.js HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html\r\nCookie: __cf_bm=IsOqOPp3TGcjKD3f5EM.PMea4xFud6UDrHSLr8uGSso-1790477747.2279763-1.0.1.1-JN4pPZY93FkEd293Dm53CDQCeJUshscVkSPkXrW93T8GvBTno2p82UfmPzzhOihO4Neie5uTjPrAK1KXdEug_nfHpHj1ERJjXokO9wYwzAgOFQB2JZGu.I2tCMQtuzpU\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\ndate: Sun, 27 Sep 2026 02:55:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncache-control: max-age=3024000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\netag: W/\"2943d90ba97fbbfc8cd5053eeb63caf1\"\r\nvary: Accept-Encoding, Origin\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a4173b42ec15a0f0-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1079267,"size_decoded":459850,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65395)","md5":"05acb2a7b39ac1bca710a198736d478d","sha1":"b4db28341a7b81aa95a33afed5de611917a1a00f","sha256":"df80d320d04e3956b9b4365a119b71492b54b2bca7e597e2bd5930e1ea2a4df5","sha512":"9a250ebe701378f634e4564e79c6aad9ed902f4f59be6289c4dbbc1efd7ceab20b977728573d6ce79d31cedf941abf627b6ee6f6be925f900d828a3f2b3d3cca","ssdeep":"24576:NquLytUVwAHdIg6lBzHYKyqty0AsY4AiiOtc/n6xzdXfY0y:N5Ig6lBDcx","tlshash":"38252abf53019ebbebb6557d454a3d4b2c48046342a69ee48d8e88f3a8811ffc4954fc","first_seen":"2026-09-27T02:49:47.208401Z","last_seen":"2026-09-27T02:56:56.527176Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/css/d47519fb6e684b99.css","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.884Z","timestamp":1790477746884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/css/d47519fb6e684b99.css HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 283493\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"d47519fb6e684b99.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"62fc6eb70c9e057f8902fdddd696b31d\"\r\nlast-modified: Wed, 23 Sep 2026 20:10:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/css/d47519fb6e684b99.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5sc2f-1790477746890-c7ecefa01587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16158,"size_decoded":4853,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16158), with no line terminators","md5":"62fc6eb70c9e057f8902fdddd696b31d","sha1":"10006771caa1caa8fc17eb7cb3c95813cc5c9a80","sha256":"0b1288c96b78bc6cc9d7d3adeaddf2f5276dd754d456ec290f0d5e14ab4065f7","sha512":"34bc83ae94a27db403f7ea38f2d4f2f460b3b4b86a5075b0e3844aa1813964b9f6704dbd5aebc755b427faac73cfe1b02bc0a6dcc24cd19962f6130c66080e43","ssdeep":"192:oGw2s7JXYS7JXYGDxsf02aZ79eqrrtIO6:/w9HFDQaZ5eqrZi","tlshash":"0b72621dab15043b7c2780f6e5a4ee9cb016a2c5df3ae6e7b9422600dbd63f31d93644","first_seen":"2026-08-22T02:28:37.817706Z","last_seen":"2026-09-27T02:56:56.542095Z","times_seen":16,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/favicon.ico","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.957Z","timestamp":1790477746957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-origin: *\r\nage: 283583\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"4933b5df725a6d1d6cda6493fe4ec8af\"\r\nlast-modified: Wed, 23 Sep 2026 20:09:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7mwhk-1790477746963-34c17879b963\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3599,"size_decoded":1774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3593), with no line terminators","md5":"4933b5df725a6d1d6cda6493fe4ec8af","sha1":"c593c9df2753f9617ebc3966e13b5a513ec2ca89","sha256":"6b7b2d88b5356bc6ea3a48fbba25f08f48ad76d5d18549076759c663678c77a3","sha512":"5395661fef133a49687968029674d4377d03903db41e8240acb8e4a795aa3b4ce30cbf0c5a346daa9f518d049400dd7898a6fe5627bacc8ce54a2ffe934ddda6","ssdeep":"","tlshash":"c471e3bb9c02dd4bdd7a3d59043e9c3914ddc87b8b25c96842ddce0917416792bc6dc0","first_seen":"2026-09-26T12:56:03.919905Z","last_seen":"2026-09-27T02:56:36.312033Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.891Z","timestamp":1790477746891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 283493\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Wed, 23 Sep 2026 20:10:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::77s5p-1790477746897-7a56837207b6\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":1084,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-09-27T10:31:20.741808Z","times_seen":1933,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/145-bdd25006a2550177.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.895Z","timestamp":1790477746895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/145-bdd25006a2550177.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 283492\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-bdd25006a2550177.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"9ee423bfd61fe11f929f20babc9fac04\"\r\nlast-modified: Wed, 23 Sep 2026 20:10:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/145-bdd25006a2550177.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::77s5p-1790477746901-430bbfae94c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14205,"size_decoded":6132,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14205), with no line terminators","md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-09-27T02:56:56.537058Z","times_seen":61,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"newassets.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.19.229.21","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:47.222Z","timestamp":1790477747222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcaptcha.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 23:28:23 GMT","end":"Sun, 15 Nov 2026 00:28:20 GMT"},"fingerprint":{"sha1":"36:C6:15:F5:21:0B:24:21:0E:72:00:85:DD:C6:59:8A:81:39:9C:5F","sha256":"B5:5A:2F:A2:18:D9:09:15:65:93:EE:31:DD:99:81:9A:9F:6D:7C:C4:A9:1B:38:21:57:51:63:4D:18:F6:2D:E3"}}},"request":{"raw":"GET /captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html HTTP/1.1\r\nHost: newassets.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=zMk.IdzIie_EMc1i34qWXQVYofR2Gps4MfaWR0svUnQ-1790477747.2278438-1.0.1.1-9ZSFyrA9891UBaOlay5CuCKFxTOuBGNeczNDhUE5t7j0eUvDPBJlZPrGWxzjyOVOF6u2aej4blZ8wAAo0WlhhdjmW0iPdQ.CK5VUeluZb_byeFwcRagBa8mUQ4ws0AYT; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT\r\ndate: Sun, 27 Sep 2026 02:55:47 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\ncf-ray: a4173b402bfaa0f0-OSL\r\ncf-cache-status: HIT\r\ncache-control: max-age=3600\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding, Origin\r\ncontent-security-policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4\u0026sentry_environment=prod\u0026sentry_release=csp1;\r\ncross-origin-embedder-policy: require-corp\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"zMk.IdzIie_EMc1i34qWXQVYofR2Gps4MfaWR0svUnQ-1790477747.2278438-1.0.1.1-9ZSFyrA9891UBaOlay5CuCKFxTOuBGNeczNDhUE5t7j0eUvDPBJlZPrGWxzjyOVOF6u2aej4blZ8wAAo0WlhhdjmW0iPdQ.CK5VUeluZb_byeFwcRagBa8mUQ4ws0AYT","quoted":false,"path":"/","domain":"hcaptcha.com","expires":"2026-09-27T03:25:47Z","raw_expires":"Sun, 27 Sep 2026 03:25:47 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=zMk.IdzIie_EMc1i34qWXQVYofR2Gps4MfaWR0svUnQ-1790477747.2278438-1.0.1.1-9ZSFyrA9891UBaOlay5CuCKFxTOuBGNeczNDhUE5t7j0eUvDPBJlZPrGWxzjyOVOF6u2aej4blZ8wAAo0WlhhdjmW0iPdQ.CK5VUeluZb_byeFwcRagBa8mUQ4ws0AYT; HttpOnly; SameSite=None; Secure; Path=/; Domain=hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":628846,"size_decoded":192194,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39407)","md5":"92f99ddc466a768d1b2af964b57ffb84","sha1":"7085051a4ff2cd894091f45e143485249ab9ab15","sha256":"04e6751b502f3e0ab603b386100b23ac25e7881d3728fb00161c0260b541c33d","sha512":"11e3182bdc97af19c7d735df8e492ba4bdc38003aa10f10811002cd76fe25f4206a66886155aee55c7f0e9e28f402b918719f018e3e8bbeb3ae1ecd1319f33f1","ssdeep":"6144:5wLIu/2F8a1Z8RNaCxJ9ezQrnu/B6iFyaTUe+U0QgH7mSey8:yIyva1Z0s6iPUZR8","tlshash":"91d4c5bf6315212f52e912d140df520b63f6d439301e605dbbb2dceeac6c94a243ab79","first_seen":"2026-09-24T16:09:41.47706Z","last_seen":"2026-09-27T11:21:15.258049Z","times_seen":245,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":11,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cc3cf723c7bf.w.hcaptcha.com/logo.png","fqdn":"cc3cf723c7bf.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.12.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://newassets.hcaptcha.com/captcha/v1/33e17445452ab4888e3f4665a714b729e48a7a2e/static/hcaptcha.html#frame=challenge\u0026id=0i282305mkx\u0026host=hfgrgjht.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=en\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=ffb2baa6-2370-4318-965a-39dcfc0407fe\u0026theme=dark\u0026origin=https%3A%2F%2Fhfgrgjht.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22en-US%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","date":"2026-09-27T02:55:47.450Z","timestamp":1790477747450,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: cc3cf723c7bf.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://newassets.hcaptcha.com/\r\nOrigin: https://newassets.hcaptcha.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 02:55:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=gIYsKfmdJcyUYR9Bz_YVmoAQc6wHx1PqtofN2Lo8IFo-1790477747.4737508-1.0.1.1-qfAp_ZmxAn8zKK7_p1jo5b3N7UvsZbsDkDT5FmxCIdL0grsj5P3gebgXZac58ZElRjKkr0.Q08o3U5q8eyBe3XxPtttp078NmLjIY7irJjbyn4e7Wai673YQZuWm1PfL; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT\r\nServer: cloudflare\r\nCF-RAY: a4173b41bf95b517-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"gIYsKfmdJcyUYR9Bz_YVmoAQc6wHx1PqtofN2Lo8IFo-1790477747.4737508-1.0.1.1-qfAp_ZmxAn8zKK7_p1jo5b3N7UvsZbsDkDT5FmxCIdL0grsj5P3gebgXZac58ZElRjKkr0.Q08o3U5q8eyBe3XxPtttp078NmLjIY7irJjbyn4e7Wai673YQZuWm1PfL","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-27T03:25:47Z","raw_expires":"Sun, 27 Sep 2026 03:25:47 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=gIYsKfmdJcyUYR9Bz_YVmoAQc6wHx1PqtofN2Lo8IFo-1790477747.4737508-1.0.1.1-qfAp_ZmxAn8zKK7_p1jo5b3N7UvsZbsDkDT5FmxCIdL0grsj5P3gebgXZac58ZElRjKkr0.Q08o3U5q8eyBe3XxPtttp078NmLjIY7irJjbyn4e7Wai673YQZuWm1PfL; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"e9c55b7af44afffbf658aa91695b5763","sha1":"c1997c6940649073543aef4ab43365b9ba1e14e1","sha256":"363afdb1041337ca43895b21a98fdbb7fe57ba4e6e79197bd57cf550735c7468","sha512":"b3fbe51f1862750512ad310ea784b275581c708b3c364c9c7d3f9e686bc69657e41c7a37e650e2af01c17239939bc44d49f48d9b6eab27602141914bb686ce70","ssdeep":"","tlshash":"8c5176831f1a8185d81f1fb104ba4f18e276db697f09a28b6914b47ccee8fd71d1a145","first_seen":"2026-09-27T02:56:36.31394Z","last_seen":"2026-09-27T02:56:36.31394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":12,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5656794e2f8b.w.hcaptcha.com/logo.png","fqdn":"5656794e2f8b.w.hcaptcha.com","domain":"hcaptcha.com","tld":"com"},"ip":{"addr":"104.18.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:47.227Z","timestamp":1790477747227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"w.hcaptcha.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 01:50:48 GMT","end":"Tue, 17 Nov 2026 01:50:47 GMT"},"fingerprint":{"sha1":"3D:9E:AC:1D:EF:71:F1:A9:E3:C5:02:19:80:CA:15:0D:03:CE:54:D6","sha256":"5E:54:2A:52:E9:AD:43:D7:1F:CF:1B:BC:C9:13:D3:8E:D9:E4:E9:49:C1:8A:59:F3:4D:09:32:07:87:C3:7C:00"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: 5656794e2f8b.w.hcaptcha.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hfgrgjht.com/\r\nOrigin: https://hfgrgjht.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 27 Sep 2026 02:55:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 2593\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nExpires: 0\r\nVary: *\r\nPragma: no-cache\r\nTiming-Allow-Origin: *\r\ncf-bgj: imgq:15\r\ncf-polished: qual=15, origSize=85005\r\nset-cookie: __cf_bm=qcqLzIOPl3L0W_Rs4ZN7RnopAmG8kwjlve5faKg65V8-1790477747.2611454-1.0.1.1-vrtIXlGFBCsQvGE4bUjyKB.HiF.FD98Obcho80ujdVcLA681vuWw9OMEQUVh14ZXrE82ck6xR7QzSCtpT3zKBtEvb007NUwJ3P2Kh0hGbuetk3fYWzFjjJanPnOMXuDA; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT\r\nServer: cloudflare\r\nCF-RAY: a4173b405aff0daa-OSL\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"qcqLzIOPl3L0W_Rs4ZN7RnopAmG8kwjlve5faKg65V8-1790477747.2611454-1.0.1.1-vrtIXlGFBCsQvGE4bUjyKB.HiF.FD98Obcho80ujdVcLA681vuWw9OMEQUVh14ZXrE82ck6xR7QzSCtpT3zKBtEvb007NUwJ3P2Kh0hGbuetk3fYWzFjjJanPnOMXuDA","quoted":false,"path":"/","domain":"w.hcaptcha.com","expires":"2026-09-27T03:25:47Z","raw_expires":"Sun, 27 Sep 2026 03:25:47 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=qcqLzIOPl3L0W_Rs4ZN7RnopAmG8kwjlve5faKg65V8-1790477747.2611454-1.0.1.1-vrtIXlGFBCsQvGE4bUjyKB.HiF.FD98Obcho80ujdVcLA681vuWw9OMEQUVh14ZXrE82ck6xR7QzSCtpT3zKBtEvb007NUwJ3P2Kh0hGbuetk3fYWzFjjJanPnOMXuDA; HttpOnly; SameSite=None; Secure; Path=/; Domain=w.hcaptcha.com; Expires=Sun, 27 Sep 2026 03:25:47 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2593,"size_decoded":3314,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced","md5":"41988b5ccab032298bd69e3c55c4b312","sha1":"a02f8092104eea5c6e14ea5af6c51026c10232e7","sha256":"fdd50ce32669ddcff0d03fc8151fbc42f7fbf56edea39cc5e16e3db6335e276c","sha512":"695dce3c15dcc8f03a4d88fea5e48eaa866cc8db4957dbfb045fb651e9fd1287150b9f7125b268d30420c94a61110e91cda9e914de767d1e8c921f5155837656","ssdeep":"","tlshash":"f551c6836f198199d5590f32217c0f55f3b1ee753f2c339b6a20b929aed07d5161c28c","first_seen":"2026-09-27T02:56:36.315756Z","last_seen":"2026-09-27T02:56:36.315756Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":9,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hfgrgjht.com/hcaptcha","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:55:46.514Z","timestamp":1790477746514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /hcaptcha HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 282516\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"fb5ff62ebaed728d57f5a0b7233e5171\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /hcaptcha\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7xztz-1790477746567-d2c2a74077e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5968,"size_decoded":2817,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4664)","md5":"523d234c668331f361b00307d213acbf","sha1":"056c6fe545a1de9423795ca1f3de7d6ba65e1d1d","sha256":"a22a12bb1ca186149ba6815f9d72920c679b71bd090502417a6123e21b17493e","sha512":"7a94ce6d4b43074f14a3a3f39af460b15c32e1a711ea8b5d7b5006b16a1503f35f32d95190bb120e93f66ec7b6fd6515938f77f5a810e15f28286210d6760177","ssdeep":"96:TmLuyaMPOH9nyWraQZZwNowICq+p1GjvNZhrONvCI0ggUcEilkgn4ggCzWfEJ9c8:8HaUOH9nyWePBfIjFZJONvCeilkG6u","tlshash":"a6c1747a9c01cd0bda736ade143aed3d01ddc87bca16cd6862ecce590741eb80b89d80","first_seen":"2026-09-26T12:56:03.915088Z","last_seen":"2026-09-27T02:56:36.316817Z","times_seen":3,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":16,"connect":1,"send":0,"wait":10,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"hfgrgjht.com/_next/static/chunks/fd9d1056-2318c61901700e02.js","fqdn":"hfgrgjht.com","domain":"hfgrgjht.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hfgrgjht.com/hcaptcha","date":"2026-09-27T02:55:46.887Z","timestamp":1790477746887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hfgrgjht.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 06:37:08 GMT","end":"Tue, 22 Dec 2026 06:37:07 GMT"},"fingerprint":{"sha1":"CC:4A:30:F0:BB:BF:AF:3C:84:DC:78:70:89:C5:4C:DA:86:17:1B:9A","sha256":"AF:F3:DC:8A:8C:65:19:9F:41:56:E4:76:06:15:F2:87:D7:85:21:90:0B:78:AE:E0:18:68:95:41:6B:FF:06:09"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-2318c61901700e02.js HTTP/1.1\r\nHost: hfgrgjht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hfgrgjht.com/hcaptcha\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 265255\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-2318c61901700e02.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 27 Sep 2026 02:55:46 GMT\r\netag: W/\"d70ea42503ecdf865cc5b50951e7a260\"\r\nlast-modified: Thu, 24 Sep 2026 01:14:51 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/fd9d1056-2318c61901700e02.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4b9c-1790477746893-b66647c743cc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172834,"size_decoded":55672,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-09-27T10:31:20.749616Z","times_seen":5179,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-27","alert":"Phishing Block","trigger":"hfgrgjht.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"hfgrgjht.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}