{"report_id":"198a565a-a605-43ac-baf4-ca969969deb9","version":6,"status":"done","tags":[],"date":"2026-03-02T14:16:53Z","url":{"schema":"http","addr":"arrerly.help","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"104.21.86.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"title":"vaultonic","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"arrerly.help","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"104.21.86.232","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T14:16:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"h5-api.arrerly.help","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2026-03-02T14:16:57.509609Z","last_seen":"2026-03-02T14:16:57.509609Z","alert_count":189,"request_count":63,"received_data":1064108,"sent_data":32328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"arrerly.help","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-20","domain_rank":0,"first_seen":"2026-03-02T14:16:57.510516Z","last_seen":"2026-03-02T14:16:57.510516Z","alert_count":111,"request_count":37,"received_data":8202203,"sent_data":15665,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"storage.googleapis.com","ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-03-02T03:33:29.293513Z","alert_count":0,"request_count":5,"received_data":40909,"sent_data":2400,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":2,"received_data":261164,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ec9df9a33b666410337704bd726733b4","sha1":"d198df361486f669307a9f500430af5781ec29ca","sha256":"caca11cea1f1ff1eca68caaf85a0bb4b49f19bfcdc242251086ee515cc3bbc49","sha512":"e86f9ff2e723cba50481674e7514202d0198ac7629d8181b722cddb077afc2c5295c6d28dada4a9fd5d4886bf82ccda806c7aacb64740f31a8c643c411143342","ssdeep":"","tlshash":"a5c08cc4b0c23d006a02641410af38e4a0284027b04c1b129c94d8582e730b08237ee8","size":143,"data":"","first_seen":"2025-10-12T16:34:39.988929Z","last_seen":"2026-06-01T14:38:39.531991Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-06-06T23:47:44.203025Z","times_seen":892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7de962156ab6f82439a33ea7f7b6ed4","sha1":"581202a3bcdfc2976cc5402e423002aa429e959c","sha256":"d2f0c93599029da7be464973295ec8a7a4833956c677e9ac9884d5227c225f9a","sha512":"0807ab26873c92d0b8a838f8c04168bae7d208ac034499af95bff50124d66b373cecf5b631676817811b2c12dfe8c20b940584cafb18b7e4d6429a57df2951d8","ssdeep":"","tlshash":"4611cefe191ab02d6303409fd76b7811643150a9001a584177ccdf9dabaafadd0cfb8d","size":1054,"data":"","first_seen":"2026-02-25T17:50:26.845627Z","last_seen":"2026-03-02T14:17:12.430236Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/index-DRdtE5gj.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9632c91e2b160676b408b6352a01ac53","sha1":"6eccbb94d1f82459b7234b7a4a5756dd064193a9","sha256":"0e26c416c5ef044fcfcd954821902bd6d18b80747490db641313337f93a3c8da","sha512":"6a37dadd860e994765f810610e8042ea596dfbff6fae30d75408d256a4fe0387d06226db9fee149a39b051012ab7975a1b3f86e5ab1d06119cf798a087b105a7","ssdeep":"6144:Lx6528u/3cLlryYqQobNsZLLXkhb2W9jXy4mpf0KW:Lx6528u0Ll9obNRbZ9jXyjxg","tlshash":"f8c42c41f8969a7df7b79055604e0510719c3fcad00888a5bafe8d0a2ba6df87357b3c","size":573646,"data":"","first_seen":"2026-02-25T17:50:26.824216Z","last_seen":"2026-03-02T14:17:12.34049Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-06-04T15:28:13.476616Z","times_seen":184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bf3d54da83101c2d0cd0d94a69d3c04","sha1":"d125f3ba021adeb05c5c7dfaf4fc7e74a0e7b3ee","sha256":"2a2418700efee08efa3470a8e6e387ed7f4769f63bb147a00d2ca287af1ea474","sha512":"6d32fa0a1baf76885888126915cbe4a60047748be8833907a4585c6248e25837cce5f38efd8ce543d95735a113922eb8e236f6fa50efde28ea544f9f85ae2fab","ssdeep":"","tlshash":"edc080cdb0d32e183e01692064af3cd4f1344467b14817528c94d85c2d330f54333e9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.962702Z","last_seen":"2026-06-01T14:38:39.52201Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7d484391ae36f9672dd3a7e7d7be9763","sha1":"d53f53a7b8fd10a4966a66bf4850e275378a555e","sha256":"ceb3142d25d807ee8b06dfc21328ad2535124a2da646d83f8460e529f9ce6f47","sha512":"24b179dc9998205322e8c96e434a14e5e610c4faf8a4b78a3a415d067d26b327a94be7ac5f4dd2c2f52999d4693664b17625d2bf65655ad07665e3a8c1f4ed0a","ssdeep":"","tlshash":"6ac08cc4a0c32d402606641011bf34e49028842674481b429d94d8482e620b48233e9c","size":148,"data":"","first_seen":"2025-04-27T11:55:12.952615Z","last_seen":"2026-06-01T14:38:39.518933Z","times_seen":70,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f2d562f0482af28097a1e8bff743e202","sha1":"ab1f7442f13da01242f874f07b84041f32ff8cb8","sha256":"8ea8193c70220762139c7844d4be3c37d53d805256513bc224b53d16ad35730a","sha512":"2cf8993becc7c96e42b0499e72862eefa57d365830253e8b580c35ee9f854d4adb0b5b6817b56dfb125acdbc496ae99e8e78d7f73220c4093e8f2d2e521205f0","ssdeep":"","tlshash":"21c08cc5a0c23d002616641011af38e49028402674481b029c94e8482e230b48233e98","size":137,"data":"","first_seen":"2023-06-05T11:50:57Z","last_seen":"2026-06-05T02:19:33.690254Z","times_seen":497,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/en-DQvpj92_.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d194c433067284808c2d86ba56fee0dd","sha1":"4819a74732db462f1e120dabd862b041a2bc3601","sha256":"1fd89662c8038341ee49411a0105c97ad21b56f434793a707a4c13972b7f1151","sha512":"b744ef619a18d60d5c71748072304695d0d680f298ea71330e4b742c3bc85d19d2f8c68c12779f946ced6642a1cd001a13bfbcd9c36507d659355d55562e5fe8","ssdeep":"768:uVtZcEw/oPriOuiUAtgzUglz6PmvsYd8HnxJSu4/HiA9JYOH:5poTiOozUglznsYqHnxkhJ3H","tlshash":"8733f78dbe164c9a04a3637a78ce6a6120f505c1c355881f5fecc5bc83e2b7367a7639","size":53171,"data":"","first_seen":"2026-02-25T17:50:26.815252Z","last_seen":"2026-03-02T14:17:12.365594Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5c7a39acdc80832820021580392fcb76","sha1":"a6978212b5941186e837a6216fbb774e529a2c0f","sha256":"50f915c4f4c0fa8f5d2c082a202659e6e67e6ba0ee02779b736c68ff2a0da2e0","sha512":"82b2b29d46269860ca9c6c31cb3c1065003579186ad2df34a4340ac939108b26cf8877e3a9a0e6d112efc75e7e7876d6d1f958dda85135c0f1294c0c4d02c5fa","ssdeep":"","tlshash":"88c08cc4b0d26d001602641160af34e49024802a74481b028cd8d8882e230b0a237ea8","size":139,"data":"","first_seen":"2025-10-12T15:34:03.485106Z","last_seen":"2026-06-01T14:38:39.531298Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d7f30188eefc54566743b0560ea37910","sha1":"9ddfefbaeee03f35051d9482cea2f36ccd33a9cd","sha256":"46f138d5b096b2d454a1d06069dc1d81a79cc1865fa5b3810359947568d238d2","sha512":"dd319936b7d72e14725ad62623eec0594fe63e6e3c79d74a5ea99616d61c6afc1076654a8f8a248b61b3dcaaa20a9d807d2aa941cd20055e3d14687cbf757d9d","ssdeep":"","tlshash":"51c08cc4a0c23d101616645054bf24e59034402670481b229ed8e8482e220b09233e98","size":145,"data":"","first_seen":"2024-08-20T20:23:53.57009Z","last_seen":"2026-06-01T14:38:39.532694Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56ed1dc7a7c7c4d0135776e306ae9bcb","sha1":"18d8914c8d7a21ea2f664080fcbcaf0c942c3ac1","sha256":"055cb83a18d103da0b9e79549d4ca0aaa5b2c7445ede7bf18317c53d8d18570e","sha512":"3f4c3d523962372f297e9aab82917e8d07f1b8f69c4a1fa2ee8e3721d73001e60707bc6de4111ca20196ffefd97f3df6b2f07211b3841f397635d05b9cd4e2e9","ssdeep":"","tlshash":"b7c012d8b0c66d002616a41028af28e8a0288026b44c1b968da4ec592a620f48227ead","size":170,"data":"","first_seen":"2025-10-12T16:34:39.92057Z","last_seen":"2026-06-01T14:38:39.517283Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55c7691ac49fb33b8dbe27f3a42beb17","sha1":"d8eba60ec9a2f4726f867ddd2731b18d307e495f","sha256":"d421b1fe3fba609c2649edb854dfcf2a95ab5b80e78389d6493790d1b387222c","sha512":"9dedf1eec48e262d578058367dd918d73f291cebf9e4a0e4de626f6eb3f6e22c3a391a5a9fba72dacd5d3d36c24c387f727ad19b7a05458a858a42ea5a0608b7","ssdeep":"","tlshash":"5dc08cc4a0c22d101606682010bf24e490348026705c1b428ed4e8482e220b48233e98","size":141,"data":"","first_seen":"2023-07-05T19:24:05Z","last_seen":"2026-06-06T04:24:34.489556Z","times_seen":861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99362d42c48c3ce8a91d0ef845a6d291","sha1":"7255a4d130d514351caf81f67fb4d9cc0d83c62b","sha256":"be94163fb61fb00bbe6983f50081c480207345b8954f9ee50fb2c1c2ae3e6073","sha512":"00d898d537893ec342ca42ae6de18ace2f732233bdcc9ebec86dadc655f76c242e445b9f21e0e764a91e23051842285042be74f3b088e36c08f664b359be5ff6","ssdeep":"","tlshash":"f4c08cc4a0cb7e145742691052bf29e4a0344027744cab038cd4d8482e274b4a23beec","size":154,"data":"","first_seen":"2025-10-12T16:34:39.92349Z","last_seen":"2026-06-01T14:38:39.514034Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-07T00:37:27.037236Z","times_seen":4082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a6dcd4a293ca369ec22e3f632d87d77","sha1":"f1ceff18918a70369adbfac3c38de492f0970d31","sha256":"74b9b080545da650705afb7bb7c83deea7d8dba4f544194b01121ffc59ae1cd5","sha512":"c1fe1c83c092b6c8abc122a6503bde6642cfdceb2ff0bd4ec7229ad0f16a48eecb5f5a40445f1a9d67d980176f4d2593a2135412d81f3afd476ee6551706cf62","ssdeep":"","tlshash":"79c08cc4a0d22d101616691010af24e49024442670481b028ca4dc482e228f09233ed8","size":139,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-06-06T11:15:25.972933Z","times_seen":1697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1dcfa69604091c6b34e7d885ffa476e","sha1":"6fea510b921781ce00aba383120bb1be83e38522","sha256":"a95b8e1b8b49c34e4a6d0d7028a690a10957f373a79584d0787c6dab02693a5e","sha512":"b124dcc683d061ee449bad373209adc2c48dc9a3d9664d3c4bdb890ab460a85c9872587d8f21a3fa2f074bd72046b0e8f49b5d3978ee1cfba4e0cc34b369a498","ssdeep":"","tlshash":"72c08cc8a0c77e501a42655029bf24e8e024416ab0889b039d94dc4c2e630b4923bea8","size":148,"data":"","first_seen":"2024-08-29T17:49:52.033375Z","last_seen":"2026-06-01T14:38:39.529854Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7c73b3e70a89b16b24889d2b77711692","sha1":"c08c0db4d510a678b7ddff79bded6b7438391e83","sha256":"296a8d4b16cd700d45fefbf3c101b1522e79fce25822ccc34bfb5b7083776ebb","sha512":"16eabb6120e5070e072e676359a144974d58aa725940e45e4b4d342431dd1f696a46c813ad627275e7dcf713f779ddddeccc43de9befd21a98fa9c075fb7f77a","ssdeep":"","tlshash":"b5c08cc4b0c36e102682645010bf38e490244026744c1b038da4e8492e630f08233e9c","size":141,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-01T17:57:24.53203Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-06-01T14:38:39.53056Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4342c075064069a75b21b06ec6c9c3df","sha1":"6d219c2b352a6e62d76bdceffcbe70cfe0b9ef66","sha256":"51d786f481e0b83ee1dc319b53342d36b4b4f8fbeda9e872f89e25ab0e41a380","sha512":"cc78154423bd3125ca7754f934cde50e37e904ab59ed3aad3e349c5be9447a95a5dbc5c39eaf5d3c2b8df659c2b29555ef731de13df95c7e4351f0fe084ca604","ssdeep":"","tlshash":"f7e0c089f4c43b50ac052429766e38e89030001a6ae85b6ad9fc88887b110f84633ef8","size":353,"data":"","first_seen":"2025-10-12T16:34:39.979026Z","last_seen":"2026-06-01T14:38:39.518147Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dc094b1b256d5c643caee7dbb2759bd0","sha1":"adf30061bd73776882c9b3c4307b9da89a77e448","sha256":"1924a94a5275e97ac50fd4b9ceb9cd137670a857a159826847a1bf70e4aee577","sha512":"7a645e4da9bc62cd103bc2b66fdb43d40826816fa26b64e459fa8889e42b5a9a1b67ef8218e9cb6cd999a1b9121cb41b3d8baedb76d9b45e861e40d72279ad1d","ssdeep":"","tlshash":"4dc08cc9f1e73e1026566a1514af68e8a0344836b0891b8f9de4ecc83e630f08237edd","size":162,"data":"","first_seen":"2025-10-12T16:34:39.965367Z","last_seen":"2026-06-01T14:38:39.537478Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/charting_library/charting_library.min.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-05T10:33:32.118542Z","times_seen":518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/ac-chat.js?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","size":2311,"data":"","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e4a7e90831c1bdb26e2ce6df106a83d","sha1":"5923251fbec594eeba41afbfac24af5ee0e74d56","sha256":"6fc754e914ddb5d93f11d74413c8e9e0db331bbc04f357c8725c824b496c3db9","sha512":"03ce6da278085fad75e631597676ce71c0e5891687222594a0620581188e4e9b72f649d0262e9bd91c8cbfe1076c492d0b5389df988e74068ff6f79a1abb55b0","ssdeep":"","tlshash":"c7c08cc8b0c36d002602781055af34e99024802bb0489b128cd4fc5d2e230b09233eac","size":146,"data":"","first_seen":"2024-12-18T14:57:20.727033Z","last_seen":"2026-06-01T14:38:39.513235Z","times_seen":202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0381290b89e9198fc37d2e50b5f37797","sha1":"1508e92e22fcce03f5d3750ebdfa5abefe1b4e7e","sha256":"44841ff32b4f70eed44572ac672c77bd9cb91e417284049c17468f9e228122dd","sha512":"eb0e7d0c8ccca235d9f892dc29b843dc17ce5ab411959bd84620db36ca384f98e36acd31e3658904cf86c7c20d2fa0c7efcae2a1b2a68139d47df061f3f62003","ssdeep":"","tlshash":"38c022c6b1c63d804182711010bf24d090389122b0489b438cced8082b630b28137f98","size":192,"data":"","first_seen":"2025-10-12T16:34:39.937079Z","last_seen":"2026-06-01T14:38:39.529103Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-06-07T00:36:49.622339Z","times_seen":36353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-07T01:02:03.32652Z","times_seen":6477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"98cb1f471a0de238da72628a4c39dea5","sha1":"de6c28f3b2e2ee6f1b47b45d014bff6a887bcd08","sha256":"b1e75cfc14734b3cb73043c2d0b3e1f10dd80af0775ef978ec39a0500f445f26","sha512":"5ea0135c7d00e74a33a6ee8ad3ea92eef10154456aade6904e59c1bafb3b755cf2e0c2d1c3efc83cae6dcf2db7354bb90ca930c1df504fa39eb03c381206c6a9","ssdeep":"","tlshash":"38c08cc5b0c26d40160aa49028ff35e89024442bb0881b428ce8e8983e220b08237e98","size":152,"data":"","first_seen":"2025-10-12T16:34:39.992257Z","last_seen":"2026-06-01T14:38:39.523555Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"47540997c6538c57830fb0ce972ce055","sha1":"8565f22fcbcff847c75545c1896ae84d4be4ea73","sha256":"0f80d63f8299c46291ef24637b760be2286a9f13587118e8c3af078cbba1d4a0","sha512":"5ca74a18fbfcd3273b667769d68236eb8eb2996fd1d8d84644584274ba0d6f5d43d6a1d2aabfc806c4e033c363d1493eb12d857d14eb3b4f40ceae3b793b4605","ssdeep":"","tlshash":"a5c08cc8e0d22d101a02b41424ff24e490a8442674481b069c94ec892e230b48233ea8","size":149,"data":"","first_seen":"2025-04-27T11:55:12.998082Z","last_seen":"2026-06-01T14:38:39.528221Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-06-07T01:02:03.333091Z","times_seen":3515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-06-07T00:37:21.510539Z","times_seen":38668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/vendor-C2lpsy8i.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"931732629bb8932b56bc1d3ab2f9b174","sha1":"14d70e002630025a460535a801b40024be3a40a9","sha256":"aad7306a35d5f79d615c0b2c4df6116ffca1a72b6b69d27dfb4b282351627f5e","sha512":"accfb16ba8bdf8d4344b52b981afd840e3d9cae4343e0cdefac79ab7fad50fe62b53763663f39dd38ddf0d927385cce591dd5173dccfb943863b2af192cb5920","ssdeep":"49152:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URU4HLqsNMUE9LaRoIuU/Zv+ehV9wo8W:n+6XdeSc","tlshash":"59a53bb8b651b07507a720e5007f0907eb39690b704f84a8f669d8e67cbc94ad677f38","size":2239056,"data":"","first_seen":"2026-02-25T17:50:26.846563Z","last_seen":"2026-03-02T14:17:12.464157Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7ab6dc81a5c1758a8381906989c4f704","sha1":"c3550c4675f6cb594031a333a3919f4d9428a278","sha256":"5eea0b86438aaa77b6a0b077bd01275ac57ab8586461564354417051a2554648","sha512":"1f75183d8956f47b911386e6a074bb83a858d49f67e7b7e63e9a1ac721f06bbe905dd07686f270d1da45e8cb224361ac7ccf68e9bfb7a85af070d24ac0b81a1a","ssdeep":"","tlshash":"ddc08cc4a0c23e001612641819af24e4a034802770481b238ca4d8482e220b09233e98","size":140,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-06T22:30:21.916382Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-06-06T20:47:56.703888Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4acf87d00c4897d30dc5cb9aeadd7c45","sha1":"dcf23a6536e55481fa1bac3bd3fd146a91e65184","sha256":"56727def1b270126ba40c9ffb947309084fc4a22d6caafd6f785307e9614ad82","sha512":"842f100296530229b32e93ef969aabe0745435f435f79bc069fbf45f5fd47526d2d8e7d2ffb09957fefdfd831d27a0d1c5814ae7ff0e5177f8813ca941bfe17a","ssdeep":"","tlshash":"5dc012d9b1832d1016166410957fa4d8912844767188ab92ded8e8583d534b45137f9c","size":178,"data":"","first_seen":"2025-10-12T16:34:39.945429Z","last_seen":"2026-06-01T14:38:39.512471Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7342e4e83efdd4685023506df50500a1","sha1":"d4e998baf5423c2212d97dc74cb641afd5acce8e","sha256":"b318b1783e618e649d51f2fd8823043ebd92c8e55930eb55798d63d62661d985","sha512":"47718a51ac2a72020f8504e34d011db4240075d28b43d5f3e360645aa64de90989ef46e947a5114e0b7d0a04001c6fb7a6dd9cc0d779069b9152f5f89f471fb8","ssdeep":"","tlshash":"83d06cf636b655802c85412e0acd2c21b1108233cc9e7a0c788c6c00afaf9181a78436","size":245,"data":"","first_seen":"2026-02-24T16:10:35.333553Z","last_seen":"2026-06-01T14:38:39.519619Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e3141b6741f85896e470f695de39554","sha1":"802b71c88e22a081673f7907b6a5859a06ad63a2","sha256":"1ba974e2b96fc98550eb2211073f493e17675b0e2611fa2b41774a5308118842","sha512":"c03196e5663f2a0268d574bf8fcb53aa187ee43f0122e8bcd22c4eae2835e1a531cf8df6df17dccb20bfe9ab51021ca4cf70e1136de63749bcf9fd8c7f9e9558","ssdeep":"","tlshash":"1ac08cc4a0d77d201612a42020bf24e89024406670481b57eda8dc483e620b48237e98","size":147,"data":"","first_seen":"2024-08-29T17:49:52.039904Z","last_seen":"2026-06-01T14:38:39.533455Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/#/home","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b60a2fe4310f25d7824536b6a1e697b0","sha1":"b1b2f5cdda4a1ddbeb01cfdffa9bef2293b692f4","sha256":"92f8551cc981825b303bebbfa6afd1538f69600db62e9723506926b5636027bd","sha512":"5486ea1d943b63594e8c994649e10b25a67945ef222ed768c2a523c2abd5e6f2194f017a8f9119a0da2b9cda115a7a8547c16b1bdbc4d7ebfed2c766114d4baa","ssdeep":"","tlshash":"48c08cc4b0c22d242606682014bfb4e49024402770885b028c98e84c2e220b09233fa8","size":145,"data":"","first_seen":"2025-04-27T11:55:12.958543Z","last_seen":"2026-06-01T14:38:39.515638Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-ray: 9d6104fb9df056f6-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65692999-49ad\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 984925\r\nexpires: Sat, 20 Feb 2027 14:16:28 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jr0cZwEhkx5wJGqg2LVFuAz30ZWppIlJyg15bX6ra9uy%2FLwP98nkXVa58doPVe1v%2FZioJR3gUl97rGTyrV7M7JRMDyMl1A7xr8WHD%2B7rkVcrchnEuWrpyU5S5Mz9VVYXpK%2FOj%2BU0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-07T00:39:12.608806Z","times_seen":29157,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":36,"dns":1,"connect":16,"send":0,"wait":18,"receive":6,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4HtgE2nhS2sjgX2%2B6tnmkqsaZDdN1Sz1IoRi7bb5h9fLNBGidMER5LqGsQqa5AK28tcRzG4Jk7ZDdxYnDqDbN5GEZ4DThgcJ1lpMtTeIXES6%2F0o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7929aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2BpU4F06knz%2BxJaaX8vUf2vwd%2FYfVsManU0y2CRQbrHNf7r3Rk10Igo8C72BGunRPieUL8N3CTlxwKBg3IhdxQa4l3iDXfVyT5VdDIXMhRXNx4A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7941aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjs7d4VNwzNc2tHPuMMbqB4xYMGogR1kyO4xpKvCBeZt1gZFPtDK7n6Ptph6ZWAasZf6yqnA3sJR0JBhKZdk0LFP7kC87ZZNzUj06HxiuhuGVew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8952aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/notice/getAllNoticeList","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WLHQjK9JB29mc7K9dACSSD9Bx1xAdnTgSzR2KNLGi4seh33%2FJ7VXTq03tW3v78i8LEjUL0hKk%2F%2BYduaup0bLZNS3Q%2BtGRqtlcXIrySGAU%2BckcGk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051bfd84aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1639,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9956b9fa045a88b426fa370648a39f5","sha1":"87e84b7051e181eb39225ee9457022019bd38b28","sha256":"6c60f186d7d0ce3c12701bd3b829ffb4b467ce18ad1d5f1cb8d67e128b125dee","sha512":"924949d8b2c635508f7c39602c2bb9196d62b56cb52cfe8b57a243152521faff1d5e139f417e57957e879236462fe13ebc6fa67d8856bf772aa72c3b9c83af29","ssdeep":"","tlshash":"c1317b1b157c8eaa09095dc324ccbcc9da9e178bd660cc34a66bcf6d86f157b1f07a08","first_seen":"2026-02-25T17:50:26.806609Z","last_seen":"2026-03-02T14:17:12.312691Z","times_seen":14,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bnb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyGFcaiywH6hwYl1idzR4mmFcLkN%2B4DnGVWcV%2BHoZ0wTa%2FSqaZp1W4Ljy7nvSdBNA9slc%2Br3zlxx6%2B6H2oxhBkdyMUwrT0K%2F6udV391jmNelW2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c0dafaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37922,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba28164be7e4745aa8b936ddc6520b16","sha1":"eaea38aa6544af6287fad19e4817e4a29573dd4b","sha256":"c28c3c5086214ba4ede7060d4a342d43721443780d1e9f4f85b310bddb2d31f9","sha512":"a6f289a29d0d679552b3830b2a378876bb5a24d2e41868321fa1c4acf8db3eb38277747c7c93c5ec43ee0746b88ef594b7068ba76eee5e82d379496e9656a122","ssdeep":"768:kGMzllezoXESODUB9Pg01QxVuZEcNCQk2Y5F+Yi:XMjezoPOE9I01QxVuZtCQ05F+Yi","tlshash":"30039e71bac9d119d838ce820bc3bdbc49063bc34bde9df145af94d26951e22d356b82","first_seen":"2026-03-02T14:17:12.313451Z","last_seen":"2026-03-02T14:17:12.313451Z","times_seen":1,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"xrp\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fNLBDYxV%2FLzHn1tRV1uVTFyAPlAXo2SDskRdTmM3xWb15quShIsNz2glVZC5Wf6Kw19wLFGYR7Np8%2F0Uc1BEl2btltUzEGlbFCWB0kjvip9X2zY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c0dd3aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38477,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d9bb65b1b6a374d776a32d7711e8e7aa","sha1":"b826997397432e53fee281290dce1df22ab02b5d","sha256":"153d3ce889a9b3973662902606bd0b67a815946285bafc178753d7d6992e5bd4","sha512":"5d244308119764f7cfde92a34dec972362ddf6365030ec82b850bc7bb4b8245052ad2eb866272787b3c70567c16e6d33a3bdbaf8d87cea84bcb3eaae9ac5297e","ssdeep":"768:UDequUcEX7XPykpQirHVmrbcKwGA1Coqncc:GXL/yqHVmrbcdGA1Coqncc","tlshash":"4c0341325ac8c065c9324cc21fd37ee03d2635c7eadd2d727daa1c54bad462af10679a","first_seen":"2026-03-02T14:17:12.315784Z","last_seen":"2026-03-02T14:17:12.315784Z","times_seen":1,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/fonts/Arial.ttf","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arrerly.help/assets/index-emMRhchU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6897a37c-ff9e4\"\r\naccept-ranges: bytes\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1KiiCgPt4WfYbbQIyPX1lNIBJHMGrfTufWvagNJr7y2c8xje2RsCqfQMMYV%2Fdw5NzBNWDGtTGFkKXkEaIzLs6gijimMV0ouV%2BBAIGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fcfa75aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-06-06T23:47:44.198419Z","times_seen":1328,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/cfd.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/cfd.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-4e6\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qw%2Buua22Y9mrgTb3VPtuBSFDs0RzKywt44nW%2F4O1fRuPdA5uLQPkNzjREn06wcuD4c0MJGxJgeBJqKvKtIlNfnoxXPYJJIF1iMKyQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105141fb7aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1254,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9115373205114c25f64dce056a8be78","sha1":"13d9c2d8ebedda0987493bec5ce299632f7acbab","sha256":"22269448e0257c0fd850d7c54387dba3d5db86bd4f3bbf651038653801c74a05","sha512":"399719ccaa22a2f3800f0daf2a973abdbdb84b6a8f24f546d49012362852772865eb78c94870511816b777f0354a9d1a291b39737ecab05f77f4cb322647464a","ssdeep":"","tlshash":"0821325b7386f190c5475b90c463b1a230e975faaf04c1958e49efc5a20e0bf48ceea0","first_seen":"2025-09-28T11:01:39.572211Z","last_seen":"2026-06-01T14:38:39.455097Z","times_seen":78,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYRKqyIZq76dkLJpifAk2NyoM3KyMfd7mcARFjI%2FnkgO2tNZJ%2FUU%2FTqJ0q7SATzsSX8QhvThzaUXLx29Sw4RoY2VwRzRtao5%2BWROfwkEj3KhmII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a895caa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lrc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o9PgLDZHUVGmNJCd7zOq0gQCa3XgB8OvaDUImwTl9TsE08R%2FdDbyQy5rQoSwPt9krAjYOcEmjNqC5Kow5RuEDclwg496T1Nso8tnSoxoEwvhTvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c2e18aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37378,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"cf26ca66b286c4d26a528431f97f1fa0","sha1":"4502173ecdd36f9ac4b7f101051a3fe8327838fa","sha256":"d4681478c96c22b3bb7a7fe0919b8af5e54cbfba4b27641653a4ee150ac4df93","sha512":"764154f052e881c07f9dcdf7ad1d3b11fbdf020f5fd9b3cbc66f97e41c3a23292aa41da4c918f75383fbfa1bd5002a0caf6fe527ae2e6af8f5556c3187aae890","ssdeep":"96:pAAgMpuhc0uQsue1lhBNCm51TB6YwRCE7pYd1m6/AurngvF1nC3VhAlvJr5DeOfR:XVdQqhBTHjwRC1mhTO3vYBfE5vT3/Q","tlshash":"6ff2bc3a7f689244c53ccd866ff7bea146d279c34acc89c250ae4c187e50e62ddc53a6","first_seen":"2026-03-02T14:16:39.465233Z","last_seen":"2026-03-02T14:17:12.320402Z","times_seen":3,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"eurusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXENEgYxyebueqtitYVZ4STzodxEdyvDTv9qpwTzqsGCbmRo%2FL32l6NDqki%2BT%2BgRfJlvOfAlzQczI60RZSP3mqUyQ01U0hacBMg3GuYfBJQFf6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c4e82aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43284,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7789fe340c0d1e161f21d9a455f3c54a","sha1":"ad8320a72642392d90b869167ea8ba79fedf4e4a","sha256":"91684d0e2279401fec21de2b586bc9abbe7d7daa28d5e5ee641727de225c15e1","sha512":"0bbdb4bbbdfd5c7c49a1e6f5ecc201ba202ef7e8574cf17d07302c615690cefb69203402adfe435450eb1a3b05e5bded993acf5c17acd1739a2cc07b8ad12aea","ssdeep":"768:ym9EC7hoThoYK4jMl5FyYCi10Qm0ZHdxPtCTdoSyertVMJe1J52w:nlo2YrjMl5Ft510KFfPtCTySyertVYeH","tlshash":"7c138d355fc9c999c5318cc21fc3aee03d26fdc6b6ce6dc241da1c0cfa9466aa945386","first_seen":"2026-03-02T14:17:12.321266Z","last_seen":"2026-03-02T14:17:12.321266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/platform/vaultonic/config.js?1772460989475","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /platform/vaultonic/config.js?1772460989475 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 03 Mar 2026 02:16:29 GMT\r\ncache-control: max-age=43200\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYoKqjyNdQ%2FuaioY0qOK6UKGsiouyEiWDcinlRRiyIVScUbITloc3GUBueFu4DvGmXgpMrU5p7sVLhacuvGm1vEl3pQ8BUcN%2Bv9P2A%3D%3D\"}]}\r\netag: W/\"6897a37c-db\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105004b78aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bf4a50be346b56bbb39bbe0bc94cf4d3","sha1":"1da9457833f34ed3f043b0c77d7f8d35fcf555b5","sha256":"ea1cddbbe9b03685c2faaf79959af0139c3c5e3ae0f8eaf6409a4f026bb187d3","sha512":"6dd2d0596734826a559d310234c48c1a8f8c507afc2b656e64bd1d8b220c2f92d3b6911cf27912e9ef6f4940bf409cc42b9d761afcfb845f2c045cb195ded755","ssdeep":"","tlshash":"82d0c2f626b655853c44412f4ecc5931b1519237cc9e761d788d1c00af9f90c1a78432","first_seen":"2026-02-24T16:10:35.262693Z","last_seen":"2026-06-01T14:38:39.508156Z","times_seen":76,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:30.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:30 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RG955HqqucyFfw4%2Frg6y3JProsSP9KGpEuBIBhOfJfnvGYQX%2BRUvSzJYC8d4W8pLf%2Bv%2Bam3uYEtw5ElAqmYoJP5Bi2yfrNmPOREkRzkZxXHqgCk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610505da09aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/cooperative.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/cooperative.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-ea19\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uqPOpQVfevkjLg1umv01K8qkhGHu3RwiU0gPZzuhszwBGyhigfVW%2B009XsKaA2a8vFvM0Q7aL5L6vSl%2FOM6zIDKL36iGLSesECHG0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105181afdaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"374f2e54f8fb75e19a350416f112b5df","sha1":"5bd4ed4e41f6e710e3180a447c2b0220fa977479","sha256":"dac0005cf2feb36b1062315bd8e714aa13492f209a0353c33127ab21fa2c9d2a","sha512":"dad24c69289b017b7e44a58e8c092a9322e20f3fe2fab5f13a5dd877d404298bf7d969e40d69b3c6bfcdc094dbba7398ef2f75ef919921829b2390c5f44cf4e5","ssdeep":"1536:EisgEPqW8QQ+ewtSHfARDTUUCz32y1HkNtJSJMa7AuGs:5Yx8QQbr04DVlkUPrGs","tlshash":"274302f0fa1d68ec8578453c969fd69fade6349b9b8c39099c04f940b84bd8458348df","first_seen":"2024-10-31T21:21:10.372706Z","last_seen":"2026-03-02T14:17:12.324188Z","times_seen":102,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/fonts/DINOT-Regular.ttf","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://arrerly.help/assets/index-emMRhchU.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6897a37c-b6ec\"\r\naccept-ranges: bytes\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aWAdi3lTgB7hz4EmpxDBJ1w3oRIzc8uPHGbjJfXL4mIqIdG2gMl%2Bpc5ubRYCYQZ3aRieCQTvZMMjCjEKd6nQayJ353Bd%2BQefzJRqVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610519bf46aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-06-06T23:47:44.173744Z","times_seen":265,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfNnRL4nYRDHp%2Bvjm29E25A1YbwQXZV%2BEN1vUu3r9yh%2F9z%2BChqbWn%2FZJgeBa54FqmlxK%2BOOj%2FLEf8ne9mSt9jJHXWty1oPKD1dQCG%2BuHsbxrLWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a792eaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/type/defi_activity_type","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bu5ONPED13cpCcfAz%2BrEEyhEDSo6zUWsaebpqQDpMpJdZT2ueMCCof4WPo9WJUZedHiK2qun6Vg22wim7BN2%2Fwdduf3EFqTX6OCILpte2PPFDaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c0db9aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-06-05T10:33:32.036291Z","times_seen":172,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getAllSetting","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uT53aZ6315ZKTAkwrCq3d7TkyIwqRXx%2B8zZKmYrBAUqEpy3WHtAGXveJKtQSlWPTFVJtc3T%2FOWAXSsKGL9S6jIDoWSY%2FxYk28xjc9KdIDUHnrp0%3D\"}]}\r\ncf-ray: 9d610511dcfd8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16162,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a76946fa30600a582d3d54e201003f2a","sha1":"e6456f8d98d8330f52ce9b551f44a93414729681","sha256":"395dc645f47aeefd6caadef30d62bff1e6a3e04bb9836d2a5a760edf8813158a","sha512":"70189c4b63b2b35fdca5de1d3db0c9a1c26a91391c67d09a86856271aee7fa4037097de52a702769e4d813797277186e153f6d2a991bd68b3c3ddd360b553ced","ssdeep":"384:wDgbW31hPQW1FcSooPQVR2eJPMJyvPTSCS+O69dbgc9yT/4GxZK+8dKK3Gm/6j3A:w8bW31hPQW1iSBPQVR7JKyvbSCS+O69H","tlshash":"8572868931cc887e8a8bdbe650f73ee079681457d84eac15d5fabf6cc9985305c4720b","first_seen":"2026-02-25T17:50:26.82929Z","last_seen":"2026-03-02T14:17:12.332576Z","times_seen":14,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/ai2.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/ai2.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-8462\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRQAo7p5teGp5qDjOCBWtJh0ven%2F2m84rmENLh8yTmqIEaV2rbZz5E0lTfms%2BZ3tLp4JwmI7aUiRpAgiEAqItSm26P%2B0FT8S20rRFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517fab2aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b527cb50c44f791e4c1bdb582c296","sha1":"b9d5e0c2a1aad9aa06872c84bd6c1ed50328bca1","sha256":"be31898c9ef6b0f26bbd66f381e89c250d44dcd5e7fe879ac913c3cbd9fe5bd4","sha512":"3c9087d90c856f7440339fa714c342e2583abe629991c6da2e1a8722b8ebb81e41f1fab72f693c069f7eed9566efb88061b35ae3da59b0d44bf5389471f46a6f","ssdeep":"768:b+F76xoi6BmlUAOAzlshwrePeuvj3ubsaKkmZD:b8PRAzlshwqP/3ubsa3kD","tlshash":"95e2f1aeef52980be9560ff9823761f113fb0bb604970c26967067c394d83b8355b49d","first_seen":"2024-10-31T21:21:10.414612Z","last_seen":"2026-06-01T14:38:39.426174Z","times_seen":167,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9JwP3v53EwDx6zYNYZQ%2BkLrMhGY1O%2Fya03eS0vgqWNJacoOTFfzq7pCWuUlzr1X567hR92Ec9wSY8qANnLdFR1d7bb1iMUE%2BT302jVFas%2FfRsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a6915aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"gtc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQrajLtUu3ZwhEGT7dqwA9FJyYjRfY2N7A3rL%2FHvVRaeWacghOHYy8xtwntRdbusLJXCSnKrdwztlPJG8W%2FoTSO%2Bq38QhPwruIK8rsuGrWImx50%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c1df1aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34877,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9a16a8bfaeadb3a09a599dd54d018067","sha1":"1fe720657629a58a212e93f0e7a20c69bd5c8b2b","sha256":"2af412b56f93e26bfa380dedd6944bcd043c773139d79110ec0850c129708725","sha512":"d91641ebb692aaf9350ea75243d800a63cd3dbe00ad81ff1bca60df3f25a4a70eecfae7a289f612dbf649836579eade30275a8c8fd0d83c452ab8dcb944fb772","ssdeep":"192:Cb/tToP9aMalJvg8sIdZxey/SAFtFqjoO:CjWaMivg8dPhNqjoO","tlshash":"1ff228345b889309d9305caa5f937f90851a3ac74acfddc103ae5c4cfe59366f2a43a6","first_seen":"2026-03-02T14:16:39.482807Z","last_seen":"2026-03-02T14:17:12.334667Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vnufPTqEaiilt1m2Ugoe54grdk%2FPGLf8Tcu1wCgjiY8pNGTZjkHeM4fmtgjbY2TLfsh8Wl6QXuEeqd8hyGnSBuvayGaQTfP52HjkyQWpad0hpis%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c3e5caa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43314,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f376aab974a78ac9e40aea893f79dac1","sha1":"2133f992aaa4a56160e2509f76ed2ebd99e39a41","sha256":"8b757d0843b4feb22f3b84e4d4a7d5b99686ce172b5279e8c3ccbb3d0709c27b","sha512":"5efeeaac6826faa5951ff6e5ff9d177db5130c1efb3bcc6389cf75218a77ee1e6c3bebfd277db896f8cde652db7fa60d93ceadcec740e283c56ce630c2685f07","ssdeep":"768:n7JhGSXa+brAtH7jRfQC78SEKCd/7BvDxrLBLSf4wSLCn:PGSXajRfQC7LEKC17BvDJLV84wSLCn","tlshash":"7a13d8349a88c0a9c532ccc21fc36ee97d6a31c2a2cd3d077cae59157dd4a69e14e787","first_seen":"2026-03-02T14:17:12.337095Z","last_seen":"2026-03-02T14:17:12.337095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/index-DRdtE5gj.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/index-DRdtE5gj.js HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-8c0ce\"\r\nexpires: Tue, 03 Mar 2026 02:16:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BtXHx5bWKqSJN3aDnv30P%2BD%2B8M7Uac8VAN1SUtugwdC%2BfZaBJZk3pBw%2FZMO2%2BMQ9pAaXeTimpGHf1aYtN55ly0NrphbWOnG0lChB0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fb4d4daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":573646,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64745)","md5":"9632c91e2b160676b408b6352a01ac53","sha1":"6eccbb94d1f82459b7234b7a4a5756dd064193a9","sha256":"0e26c416c5ef044fcfcd954821902bd6d18b80747490db641313337f93a3c8da","sha512":"6a37dadd860e994765f810610e8042ea596dfbff6fae30d75408d256a4fe0387d06226db9fee149a39b051012ab7975a1b3f86e5ab1d06119cf798a087b105a7","ssdeep":"6144:Lx6528u/3cLlryYqQobNsZLLXkhb2W9jXy4mpf0KW:Lx6528u0Ll9obNRbZ9jXyjxg","tlshash":"f8c42c41f8969a7df7b79055604e0510719c3fcad00888a5bafe8d0a2ba6df87357b3c","first_seen":"2026-02-25T17:50:26.824216Z","last_seen":"2026-03-02T14:17:12.34049Z","times_seen":14,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/platform/vaultonic/favicon.ico?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /platform/vaultonic/favicon.ico?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:29 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aR76AgZLfARF%2FH5mGwOIKlKOH2%2FLkgi5VzGXn1DtmnwaJPz5BlaRaPh9xCNCeOvDyCtZ4D%2BIetgCUNDmeD%2BwZOG6bFQEr8V%2FXCTMyA%3D%3D\"}]}\r\netag: W/\"6897a37c-3f280\"\r\ncontent-encoding: br\r\ncf-ray: 9d61050289b0aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258688,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"80f70d88d8223ba7dad6c7f197b1f75a","sha1":"6e39c62a96895988474afcef0072dab781dbb7b3","sha256":"6a662bf9a3fcb8d134d1147ef1f2aa59de6c11db02d14ee0868e323153abb5d5","sha512":"8bf74c56c73576d7178d7fcc36b0c7cdf30871b1b3b7043506f4b6de3c4bc117ed8b0608ecf56aaeabb19b2b10073184df52273f65bba85eeccf26cdde873333","ssdeep":"3072:vO1Apa4r+wfe1He4fB9E3phFeDxibkTITaZ1rN4IlXlnjKzSX/q0nGAkKq4a4Eb7:vnpaA+ZekkwU6PN4mFN/q01kBbWJti","tlshash":"5844238d9e05297eeb1633ff99b327a8b34ddd810f73db2b6112505b5213a906c1b34a","first_seen":"2026-02-25T17:50:26.789678Z","last_seen":"2026-03-02T14:17:12.341968Z","times_seen":14,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/svg/light/huazhuan.svg?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/svg/light/huazhuan.svg?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7t%2FY%2F5Mv%2B7I7YwLWVeCUqY5ixZ%2FPcglIbkInC05Sd%2FoCu9psjvTcY5vpPVfowrl4u74JyDfcfkoPzCuf%2Bdcid0yNylg0pDlXbiafbw%3D%3D\"}]}\r\netag: W/\"6897a37c-2ba\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105144824aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1746385b212ba9147f5a7ad0617a561","sha1":"e929b5344122d4054045d106fb86b37d8c860053","sha256":"19f48196fb8ab37c34e74cd8c181d06736d099be22916af8e33dfc667da3be31","sha512":"017079b089c9cb76ace7dc4e0c35875675bea3f43becd82811918560d6d8de2c84667bc408511bcf73553c37641e1d2be3b9c04fc30327067edbe43a1d7fe4ae","ssdeep":"","tlshash":"5501fe3f035dede42626e3e46f580090b473b156f34890ea7bd337355d1d9731820921","first_seen":"2025-10-12T16:34:39.829669Z","last_seen":"2026-03-02T14:17:12.342887Z","times_seen":15,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjcBHte%2FymHqwhgTuc%2Bckh%2B2kCdwgJ0s7%2BVcHFQj7%2Fha3%2BHUiJL3of76UVxbrdPvcx%2FeqH3eXmBgKOivkbW2mEkP0kXubVd6M%2Fa7tKITGJM2CCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7936aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SgsJnGKXZwQCH4kotPq%2BuTiNCYhcJKyzDNgIWbdKATCDBLF0shpgo7K5aEXCGfsRQj2IN8VERsD1LFjTtW2PXBS%2F1YHg37Ffinccy6LvgP68Pgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8961aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"kava\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7NczI8guwE7%2FkE6st3cRu03z3q9sthoutAqdtzuLlGx6DZ6ViGBk%2FoyklAA%2BLbMTTlcTFEFtvhachi2mYZbiJQF0NJ9IOs6F%2B6bLz%2F89ufkhog%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c2e1faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38063,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e31c4c0c9aff16dcbf8d6cebc8d6afb5","sha1":"94587ee41af90768965db56d37c3b3e1145d1f25","sha256":"c70bece63b4e21b9ba1eddbed294e471e61ceed3d38fe311d36e06186bbbbb40","sha512":"e6dbcd86cfe50a0448ac82ce55d283a66b8251982573ac4cd9319cd65dd091ba22d8028a74e7397ba5f0a523f80254e113996379bbd04f0873ff0dff8bb72300","ssdeep":"768:1D2VxYEYrzqKiv83vfc9MrVd0pnlyk8su:E9kqKiv83vfQAdmnAk8su","tlshash":"a403d1f04ac8d649c5304d9e5f836ef066613ac71ade0dc344bacd347aa0366f2997a7","first_seen":"2026-03-02T14:17:12.343657Z","last_seen":"2026-03-02T14:17:12.343657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/contract.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/contract.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-594\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbOdpRmLnV5sop9hDN5kYxiK3K1zlaRwX99Gm4FVSyBg%2FncpLfToqLNdWvA%2BH1OF30EEG5DTsHCA1k%2FpWoFBUEoo0MATz7gT2B2i%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105140f9daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"efaacf17d8d90547953a7a9dd61ec2b4","sha1":"e3717b22a97be0eb581782ec087beb5b56ad036c","sha256":"8dc73b270dc5ae9a60c94191834deb88dbe59950f72be72bdda75ea3618facd0","sha512":"5cc2004dd6c6d614dc980531e6591e8f408dfcb0eb6e632da58375088015f761f630743b581225655dccd32464b2311b5513d2a70d43c4b5bd3ee18033d929fc","ssdeep":"","tlshash":"dc2141ebe7d8b5d0e905e780c91592a1b5b931f93b7e4b54ca90af08331c06cc88ec54","first_seen":"2025-09-28T11:01:39.541404Z","last_seen":"2026-06-01T14:38:39.451045Z","times_seen":78,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/ai4.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/ai4.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-fde\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZG9dWJN3sorQNlM4Qa39LwR8jia7EE47wkk0tjK8AKyAv61cZDfcWKP%2BH1mJ%2FoGKWA60k7fhDHsgs%2FKWUqfQGAyGIdsG%2BOMgGrkYrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517fabaaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4062,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f36289a67c02534f334b7a7ba82586a","sha1":"ea680334caae72af8027d42c36702e6bb6929f64","sha256":"0b143b746b8b6034e6dcb73cc78fe60cf59e42a9cba1a6cf605045a9c2e5bbde","sha512":"82bb649678fcb6313c60455f6cd283a1ae047d0f8ba4a0508cff06081b2c231702ddc603c823ebd3ce17eb4cd12b8df28d346c8a04faccddf905b79979f61aa3","ssdeep":"","tlshash":"8d81b62ab3b9e976f104e7b8d6059830355a48bbb5814250c3f5af2f91241cd1b3f8eb","first_seen":"2024-12-07T19:52:26.441151Z","last_seen":"2026-06-01T14:38:39.49296Z","times_seen":141,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getAllSetting","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zF5MfzR573HyDfs4fqc9fybDFfkkmvSRe%2F8Qx5%2Fuy%2BB%2FWf39A5Q4aB3Zp2%2BE1x6SoU1ZKHbxcy0AD2f9A3tqUQISANtFg5dHWHaZXXbY2zF2BOU%3D\"}]}\r\ncf-ray: 9d610500cf5b8a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":2829,"timings":{"blocked":52,"dns":1,"connect":21,"send":0,"wait":2720,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLdR1JBpmNsoVsr4xvZIgM9dOMrkdq3afl364wX55KYtOsg%2BlwhGt22IuiDKHSF1%2B2sbC0fZVg1%2BzXbuTksXnKRyVEzecZUEQYdTotMI44hJQ7Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051bed79aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3d72327083bc6fab68f611de55209a34","sha1":"b8006aeec27a2a1e5707a5db7677dd6567af50eb","sha256":"55c41ca522552015b72b277fb576122e1857c31c98b516320a442d3427e8e18b","sha512":"d2247537222c16cfc02b2472322e7bc6ff45603f7380250b51c21610d8f519016303c45186bd3a7b2ba82f25c943e06f1a6f9737598a0b6c031e29a111d82c36","ssdeep":"","tlshash":"a9318b1f153c8eaa09095ec324ccbcc9d69e1787d660cc30a66bcf6d86f157b1b07a08","first_seen":"2026-02-25T17:50:26.800664Z","last_seen":"2026-03-02T14:17:12.352095Z","times_seen":14,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"bch\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2B4i5bKnT2w5AcK75GQuN%2BLoTZ5t1Y351tUUN041bpZKm1g0qHFFaKVYseekrEW3tlQaew49v9YNHhBTstM%2FIp7kOcchWk8o4yizXZwIRg4oGf8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c1dfeaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35731,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a51fa16d99a3f9e67a3b7095d31c7ec8","sha1":"7ebbd74adcd18032519deb440fad532af04db7be","sha256":"7e557c222039ed9925ab188e19f61eec9125b10e346d87b1314dfcfe9446201d","sha512":"566ac821101e1e91ea020b7e2002b498eb89b1c4d1ffa278791f4cb55a592b31db515c56d12572998ab0ffaf43200b617bd03a59d9e38c062c2af73b16696cf5","ssdeep":"768:ZUXFlG5YcuYFmn2qvqcc0q2b/DM/TyDBVZD2CpBcD2lX9VyyJwEpFNbvjeyDILVJ:ZUXFlG5YctFmn2qv7c0XLM/TyDBVZD2p","tlshash":"fff28eb98f6ec19ad8334dfb8fd7acd4190574c32bcc9a0294bf91116a58673d10a7ca","first_seen":"2026-03-02T14:17:12.353067Z","last_seen":"2026-03-02T14:17:12.353067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/finance2.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/finance2.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-f73\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qqima2gFx8M7HjmnnnJ%2FsNYwZ8%2FUDefZpXGZiTYcuL5tpLnIV0kQKKrwbCBpLBq4jHamStHjB%2FnHBQ0yfaMz4RAfR1Hnw56Jbyq%2FPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105142fdfaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3955,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15820c69df508a6f4594abb055110518","sha1":"53c2b28dcfca28a52709d483c588599263a526e1","sha256":"e8ff1bfa91a28bea1b4e9ed5045a365ed42df3536c30d346ca29b736eb3fcce2","sha512":"fcf282fc54d829e562658e8643a296e414e53ae0c70b436255ea1e275accbd40416b1eb73a166221a68d63e5322b69764c0c39f23fe7b1167cf87bd1cea54ce0","ssdeep":"","tlshash":"3181b7f6e3d972f4918beba8c411947175ab34ff7b294b4983c0ded4651606d85ccc84","first_seen":"2025-10-12T16:34:39.812214Z","last_seen":"2026-06-01T14:38:39.501063Z","times_seen":77,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pkiGrSxb0cYNq5KRb1cPI1EotyCwB3pBWQNj8w3yV9KMKjEbcM1pHH%2FSqXA%2Bph9LTVOocOem5CWMsYhGXy5SIDsAQKQczmL3Ugj1nHeb8tPdGRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a894faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:30.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:30 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bY4XLonGTy6rKE7KnOig2w5shIs1V6l0gdrTYvHuqEacDswwGgVxT1Nwf39ycVRp%2F1hzVcq2TCQqoUUGWqopwLpPSVG8%2Bs1rL4fisWvKArUCcKg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610505ea1faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/more.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/more.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-59b\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nW40MubWBcSjY2l64s1XXCUrzVlA0WcpXNzH6NiouTQC84QC%2FFAYgGUE6bXsruFhcDerEt7d%2FIzi%2FLlAn06sthRzNByLdNUe8k5CMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105143813aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63810c29f19cf606d16c0cf5fee50f39","sha1":"a78c6ae3bd094c40b29dba1ee1047ae74c6120d6","sha256":"f1d750f4e0385db35c7d1ab9f46537cd61986e2a58c72a49e21cdace58985ab6","sha512":"e07799ea4b257e23d17317e94bbcc7cd5c9b3c2f5893d3fbaa1e267811aa9b5e02ad2b26d224db1ba85af04d6dd5ff71fb9ce8b753bed248253271ab1513e356","ssdeep":"","tlshash":"a2218eae03c87058c116c7afe87e12f4fa6128ff5b504b5ab57c97341f46a4e8499cc2","first_seen":"2025-04-10T04:12:55.936161Z","last_seen":"2026-06-01T14:38:39.485431Z","times_seen":112,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/next.png?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/next.png?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 822\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6897a37c-336\"\r\nexpires: Wed, 01 Apr 2026 14:16:17 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAedYbH28dtmAGyzwkffrErExI8lE2tLfKexzGuSs66UqMp%2FXBI9B%2Bk2w8TILe3WP3USRhwU38Xva7eS5ImO0%2FyuDO7aqKrBBQyPNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610514481eaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"56f4c6bd26236cec628eca09228bd623","sha1":"0c0cd20cdad0053d2d88d9b2a9bdb45aa7548bb3","sha256":"bc7f7a772a5fef50a9499daf268bb6f82b915b33c10c2a2cf8afe24ec77da77a","sha512":"fdde6c6101a816389398341a64f8dd37cb4bf13a6392fa0379b5b7889da00c16ae38792f51e8025be530c28ae5ea90842e6c3d7ed43b80db094000dbfd788a88","ssdeep":"","tlshash":"5e0186a5364ef13ef1c3c935e5340364cb3b4c38857c28aaf6d09d2694c0b49719135a","first_seen":"2025-10-12T16:34:39.767715Z","last_seen":"2026-06-01T14:38:39.432219Z","times_seen":97,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCdER9PkDO9o%2Bvrbs2T3JcIZMlxpLdYwZLdOJJcHks1Gx1gr4r3Ld1%2BpQl6LaDmOjTY9Olh%2B6Du4YesjlNzHAX06NM3N9dbDxdziwtYdwseLJ8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a896aaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"eth\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVFpwNoUYqIx5eXbLtkNAeCCu5Pfl6yFLvjpYySwwQcfs49t0Izyityio8wI1r2FbSV4QuEDmLtxBKMgbdkhYYeDI7rWry91%2FLiNGsbNFUoT%2BZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051bfd8daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40606,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fc3f78c16c2cf039d66124aa262e1696","sha1":"924838a689b36311ca1211d1d3c87ba06502e148","sha256":"3cfbc0bff9523eb26c158eb2dafd0d8806e7bf6158289ad1dfaa89631892a3bb","sha512":"93b3e876fa6a33fb036fb975df0bc71772275c2189355c1832f902621228c3fb30ca4d0707976891d2b23b7c0be8705ec6bd7e4c5f139ef31577ffdee3bb327f","ssdeep":"768:AFO/wnjyFMi5lFzFoVosz6l52DsuUkmCtJZmRR0MM6gqZL91WneW4NhSM1j0vhy0:PwjyFMiZeusSolrZ6dInMAhyILV","tlshash":"ce0327358f98dc4dec358de64f93bce40e1233c34bee6e6149af49513a9426de105ba2","first_seen":"2026-03-02T14:17:12.357746Z","last_seen":"2026-03-02T14:17:12.357746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":346,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/charting_library/charting_library.min.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:30 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37a-2a6a\"\r\nexpires: Tue, 03 Mar 2026 02:16:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WIqz12294PzgF2bfEucsSeTDzjXIhYAyUBKhbGDSOuHDE7da%2BcjV5enEJanzdAAhKccGw%2BvLh8tGMrPWG%2BUFtcuDEiHmJPayQaTuYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fb4d48aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-06-05T10:33:32.118542Z","times_seen":518,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/ai.webp","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/ai.webp HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9016\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6897a37c-2338\"\r\naccept-ranges: bytes\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2BA%2FUyIptwkjBLdHrrK2j1qs%2BARQnemsz5uYNr6wkssruDq5dwj2vEy48jHx%2F9%2BRiKbJ9ydJFtaQRJ2NhFu%2FHEdi3aR456FcmtkH2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517faa8aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ee434d763c325a57dc68dd5cd9342f9","sha1":"db594747347f4901f82ff0d9cb3ce71e95613f78","sha256":"40bd9102ca0e9c26e17694aa71ca21d20bf1f920a73ad03299e21f39eb59383c","sha512":"8a07454d75b9d85f457896ac8bbe209bb45fab6a45b8af5ca1731f443be0938a23f231c9491f76270d08a92e10e8ff453b5de08bbd3196d5c3c8645e5bee169b","ssdeep":"192:FwTdlXOaHnulmseQ++iVAr/wOr9fwO7+v3DeULFnXX0EXlTqKoh5b3:FwTXeaH4++i+X2n3qUJ0+lNoh5","tlshash":"20129e112be96767c912763dd1d05b9bde76fe0ccda8abaa4100895f09172d03d8c1df","first_seen":"2024-10-31T21:21:10.228315Z","last_seen":"2026-06-01T14:38:39.475463Z","times_seen":182,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/index-emMRhchU.css","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/index-emMRhchU.css HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-b921d\"\r\nexpires: Tue, 03 Mar 2026 02:16:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPHD3FIoqH2HXOmBaOCAfmpFSVFdqtXZVE5WURxFl%2B%2FDn1TQ9P7VgpNEsJz3hYoC00246j8NtKsiAXEyc9i5GnETLfxLZoKgITzLkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fb4d54aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":758301,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"7ac9a6174bf3804bc6f2720034cee05e","sha1":"a494956d544f04f7e5b291a48fa5d8d9d6131e66","sha256":"3624630ae2aae22a0f5510b2b0788d7aeaaf1729da6174ea2f218fd56e52ddfa","sha512":"d1922f9df6a813f2e1792669caf64f41b50bd070d4353772d30092acbe52c16eedb165aab080d1e6c71d37fd152742fe31df64d045dac9dba0a085007201e07c","ssdeep":"12288:9v1s9dZ8w71ZACkFDS3vyf58rBeV05Ts/BV5pi6wk3AvFTZEcCtUhr:9v1s9dZ8w71ZACkFDS3vyf58rBeV05TT","tlshash":"f5f4d728f684103c7e37d6a57fc45acce12cea61d8424ee8f243645a4ec77f7276261a","first_seen":"2026-02-25T17:50:26.797475Z","last_seen":"2026-03-02T14:17:12.360509Z","times_seen":12,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getCoinList","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffhx%2Ft7WETvsvW5DQgAteZXvsAosYT673xXD3eLvo1ZFV5oJ9XibnUcFJ4ND9TpEV0Z3STFoTqCjM77WHYun4Lh%2FddZB%2By%2FHLzlSlQNTWqx48aU%3D\"}]}\r\ncf-ray: 9d6105024b378a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24401,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"32a7079ba0ca2757286c8df9e2df571e","sha1":"ce4afb53f1b68551da92221b40b33d1a2f61d113","sha256":"9092f9f45e68829c9f20b0640560da0e19e9cbdfdf49ebfa3e5efbd6d6966afd","sha512":"be79ffc04262351c7ef8c3de2a6afd59c159a00a0f0f388954f632c56b1d80faf7905b62d643c687b36df9fd933c775fe37e9012b6b0c0e31a6c224d077323bc","ssdeep":"384:4pl6RWd3kqCaclGdu4vVc4e5rIqlbNvgMZ5eWGwLlhL7CkaeQxhfbkut4uR0w4go:4pl6RWV3CakYbCJJlJvgMZ5eWnLlhLWg","tlshash":"22b26325552c5abec56dd1d12dff3a12908c31afecc58e1ed2de8cc8cad49706606b0b","first_seen":"2026-03-02T14:16:56.326287Z","last_seen":"2026-03-02T14:17:12.361116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/svg/light/dui.svg?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/svg/light/dui.svg?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mP5z2pEepbURbvwWzpJwcde%2BWda0jsKsUOB5aQoP0YSKFiFu17auOpHzbAT1lh%2F%2FFK5j9Vii0rySnZ9e46mIeu4D1q219bXDCi4tuA%3D%3D\"}]}\r\netag: W/\"6897a37c-2e3\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105143815aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23e860c49a250ab2f13c4bdbe433eaf8","sha1":"ae765498e7417a2ce05efada4ed4f76db2eac113","sha256":"2996bd23284aaf9b7cacdf542881141478f36c4b16a4b2e872ebffff24d40101","sha512":"8dc724787f21f9cfa03313ecbfeaa8d2e34cc830868a3b2e14b23312bf0a6137e76c5263a4de826b7d1308de136a389ecc794a1e21b5e67e0497d6be4ba1d812","ssdeep":"","tlshash":"ec01103f031dede41616a3e46f5c00907472b059f34890e97bd3373a1d1d9771820921","first_seen":"2025-10-12T16:34:39.710353Z","last_seen":"2026-03-02T14:17:12.362669Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/type/defi_activity_type","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0FdQQgh1m8zNgm7Ap72m2xxQhDgld9kixvmx4wGebrRjC5FiG83CspZrjQUCKMGhPh2alhC3Hlx77e5QgXk3G1n%2FBLW5UpwzNQeoPLXjchujeSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a6905aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xau\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09UBuYt%2BA6h6HkqZlvRoPWCb5yV3b4DGIndaqNYVKoXnWwibPBmrPeW9Cvov0rmU6L9%2FwVz6kSR9DsbnZSqiswzPHoGwCyWTLlWmo7B2BzpUKLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c3e43aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44980,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"14e9b4f65e00fdeaef6356c80831ed07","sha1":"0478ed5a7ca34568964483c5b98fe7df1f7239e6","sha256":"267d7522336fa4fd306879b7c7b41439e08cf7a7f920879e26979d1144c5e702","sha512":"2ad24fb7a5c1ddff2018607e3c92e61b7a3bed187559fab395b487ef524e2626f7c5cb4753e01b0b101b22923f15bfc81040553aefc3bedd56bea569430cc03a","ssdeep":"768:/KfoEe72pACGTvEYN+BgG4BZ/iw7HDdtTu9EZl14lb8tdaLLnz:Sfot723GvpwBun6wXbYuloedaLLnz","tlshash":"7813ddf59eaa9178c438acc62fc7fce09e1733c346dfad9146ab50062a58336e155783","first_seen":"2026-03-02T14:17:12.363659Z","last_seen":"2026-03-02T14:17:12.363659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/en-DQvpj92_.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/en-DQvpj92_.js HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-cfb5\"\r\nexpires: Tue, 03 Mar 2026 02:16:16 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLrqVPOKI0V5h1J1mHcRzJL9ue1Qwhj98PW4ewsec%2B9zmscZFcY1mcQFj3mXyWVL1NTSflVi%2FlAoUGn8Jm7fSGSJi9aAHxdR%2FTa%2FpA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105136e23aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53173,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (53144)","md5":"d194c433067284808c2d86ba56fee0dd","sha1":"4819a74732db462f1e120dabd862b041a2bc3601","sha256":"1fd89662c8038341ee49411a0105c97ad21b56f434793a707a4c13972b7f1151","sha512":"b744ef619a18d60d5c71748072304695d0d680f298ea71330e4b742c3bc85d19d2f8c68c12779f946ced6642a1cd001a13bfbcd9c36507d659355d55562e5fe8","ssdeep":"768:uVtZcEw/oPriOuiUAtgzUglz6PmvsYd8HnxJSu4/HiA9JYOH:5poTiOozUglznsYqHnxkhJ3H","tlshash":"8733f78dbe164c9a04a3637a78ce6a6120f505c1c355881f5fecc5bc83e2b7367a7639","first_seen":"2026-02-25T17:50:26.815252Z","last_seen":"2026-03-02T14:17:12.365594Z","times_seen":14,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/svg/light/notice.svg?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/svg/light/notice.svg?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6aS74kibNUdJoLbi3eEUl2Ru9nOrfUFXEOz%2F1JSseM8lQolCNwVVQOisK2SLCJwz%2BvObKN5EfO0uaKPsds%2BRGTHWjgLcCVyXkAzfA%3D%3D\"}]}\r\netag: W/\"6897a37c-3e2\"\r\ncontent-encoding: br\r\ncf-ray: 9d610513ef5aaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e399bf50254fa4b12e8a0959d171d0ed","sha1":"f45a07a56d5901357826ede835840a6a700209b2","sha256":"417f5f8e092161317f0e5cf2c41082a699ff951521208adf625391363ef2a31e","sha512":"e3b97813d6e0e1cfd57d4fb580b54a6a2e249059e25a750c83dfa3346a6bb093fa35ebe32d87b6321b4bff91253434071a14796ba3f2cfe3ec195ab752f9a288","ssdeep":"","tlshash":"2711eba8c249922c9164a38eb9788941c818608775d0dcbda25d2d944b328fb6f985df","first_seen":"2025-10-12T16:34:39.877907Z","last_seen":"2026-03-02T23:08:53.825297Z","times_seen":26,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/trade.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/trade.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QH7vq8gthNLh0y99V7Jy6pdaKHsIxctB78Txb16BmYqmFFgWlCY13mjTEi5L%2F4XKg9AzOo619156sfRqfy%2FvX6RiQxae0KxzN3KnOg%3D%3D\"}]}\r\netag: W/\"6897a37c-36f\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105183b6faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":879,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c09fcf55adb1490138ac9454f8d40897","sha1":"ee5a9654240b7a9c4afbe0288c5d82ec8205f43c","sha256":"3efbb73beabc3f4e1d62832534ac761cd07edfb93137fb02d5a8841cccf270f5","sha512":"857610b5980dad0695e39a504b2f828eb485f2c045ef01e40178037135c3742e8b8058738f20d1e61866d9a9a802eab147921f05d5cf9c2419dbfc76fa488afd","ssdeep":"","tlshash":"2c1148182318597cf1223d11e36e7e3412d22a6a36442159fae630360d2c18ebd3f5df","first_seen":"2024-11-02T13:21:09.708989Z","last_seen":"2026-04-17T09:42:11.366668Z","times_seen":289,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 72\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":72,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"lever\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vj%2BSPBrYQQRzoH8oSn7z38v7XoWqIvRZ8qIt3qxMndQ0DepUI5ySLijDJi6I1xnZxEcj4y0v7lb4vqj4PtVY9bNkrYTg1X5vOci7xdF%2Fj2Ju%2BMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c2e34aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41475,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d7826cd69f978a2fedaf3b798123d99b","sha1":"9c82d610982f2d71ba60ff35bd26b8a42cf48fae","sha256":"ddfb6a822b4028b6d061b6b723b44cb5bf4a4d80640849061b9b52eaea395988","sha512":"344c6e49c29e0a3a03e3ca35b99b60d5ab889ac5916092942716c5f3c137b83113b6b6be29e5f0b798de370535994c9a03977da9073a10dfd4b01f22bf37788b","ssdeep":"768:NcW+9HS9mS6u1XMhX5PoOSGfA/Sa1q8pFXv65J/g54OXergy6K5jyszmq5eCSW5P:eW+9HS9mS6u18hX5PoOSGfA/Sa1q8pF2","tlshash":"6f1320f658bab086dd3c6c811fe37eb65d773a89cadd886c328900596953334c8c27b5","first_seen":"2025-10-12T16:34:39.857092Z","last_seen":"2026-06-01T14:38:39.440301Z","times_seen":77,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getMt5Amount?coin=xau","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:30.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NmzTaIPh2MPBIu2T015Ns83oQ%2Boiqb%2FSPo%2FEZg5WfZ%2F%2F6ajsT%2Fg1%2BSN3B1nHuhoZ%2BguwAZEoLhplIMvwP8lNwQIBCFfs%2BKmd9ESavxnNyU7Sxx8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105073d78aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9f52a6ae386d0a2f1820bf636e55e276","sha1":"071aeed1ab53043310b2eb6e0448c368a03f300e","sha256":"eb9efcdf31435b788ada3e809f06e5a95e23280f54770383704998cbbad53425","sha512":"604421a4bb0367afcc4fe111451d11ac8074e704521132c2b26d0d83758551645c08d1185bb6d994182311550c374e31b825484861f10448473f5c8f111adcba","ssdeep":"","tlshash":"95a02208fc088082200300820a03020080f0208c2200cb0cfeaee230c00023e38838a8","first_seen":"2026-03-02T14:17:12.36817Z","last_seen":"2026-03-02T14:17:12.36817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/market.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/market.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-412\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPi28CzBxv8u%2FTgF8%2BwyiK7GFs7u6rg9GrMzJIVzuU39mSjNlNMjhRayv6QnCm%2FukXp7UKz%2B1Eco0SBZnaODe5kk%2B%2BPU%2BzdhO%2BarOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105183b66aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4773f994889811c57cf14def4c8d237","sha1":"eff4d453aaeb728868492359e9417801f826f3b6","sha256":"a559c684d582d837f6e01df0b556999bc62663fa53c7bf845b0547af5e803f36","sha512":"1b69ed9e12d75100809af8072a154c4aafeef1bee62da1e27cd31558178e9252923c9e5e5e23f205f703faec8d997ed8027f36903f84281e5838d0179372f43c","ssdeep":"","tlshash":"38115b09734cd87cf13186a1d34972381aa2297316953534cef23278a60c1deacbbecb","first_seen":"2024-12-19T01:41:46.207637Z","last_seen":"2026-04-17T09:42:11.41732Z","times_seen":254,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"ltc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QZZUa%2FRhHLEwgL7iUcD8RO7Xg7OSjeaNFkw%2Bv4YUtfQrOW9%2BmRSl%2BnsQUBLf52ZFEDX4j4Mg5Yo9QT0M5Jx31cvxxPWkyUJOGSWWxCSZe1T88fA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c0ddfaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"168613c4f059ee6ae7a5181585ae1b40","sha1":"c0876cec7ae12393a22d4f715ea42f73de5b441c","sha256":"1411f7412ec0cabf733e15d222c60844c73616f8b32a8030a71a9a7f7ef3bde9","sha512":"1af7b5b53ed559db829fa42f6e81f6cb65af8d47d3593788df7eb90ff2566502ba1acc2452b297f40ea3aeadd776a70e1c8c9f28779396c7b4047462ee2ae115","ssdeep":"768:NMM5S4ekEpVIymHrTy2iQ0Z7iAwQ8p2J/hUoW:JreDIymHrTrz0Z7iAwQ8p2J/hUoW","tlshash":"fcf24d79ca88c0bac8359dc24bc3bce0491b33c746fe6dd125bf94712a98727d615b92","first_seen":"2026-03-02T14:17:12.370137Z","last_seen":"2026-03-02T14:17:12.370137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvZga%2BUFCf9iVdjN3hzkBtBynRzeGFrcZrmcEIM3vbglGn6wFrd%2FU3VocmKhcUzUC%2B6K2mlJtCyQKAFDqmBVAUJcI6e4YEMp9sU2cjUBk0x4%2BJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c4e73aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45697,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b00b4522278b17d1f4d99287db09ee50","sha1":"fb785b864f90a4b3ebb2c78ac04b92b9ebf76a73","sha256":"7c66ccd2aad2995410bc7f7cc51a73d03f748be20cc33084f5a16bdeccda6416","sha512":"6ed353c7680d98760dc4494257d7afd906999a127e3016779cab50def5a17c22ec5a4d8bf2fa82db4acbe6cb9897b9b0e4d87159aa69b7706f902c6a12f6b266","ssdeep":"768:9RaAdk9DEmSwal1JoR/RVwRW6iym7dPpK3fwdXDi/J1Hz72VJkR:WAd4DEmSwa/6VwRzSdg3fwRmJ1T72VJk","tlshash":"6623c875cb8ad049c4f48cc63f937fec8a5331f26ade6d11329a4910e966e2af355342","first_seen":"2026-03-02T14:17:12.371422Z","last_seen":"2026-03-02T14:17:12.371422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1034,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getCoinList","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lj1goiUfZmtTBg%2BLAsKm724xWbYidp8KvAxlt9m1nT8joeUEGD6l0%2F9ss1TjGHW1OOQmZcRpESeqpxXufslgFgF%2BuKuhoEOtw%2FvASbOxbwnERAU%3D\"}]}\r\ncf-ray: 9d610500efa08a33-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":66,"dns":3,"connect":25,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/spot.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/spot.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-59a\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgUjnnkTz4QTSP5qFpLmUyx4NaRCIQ73VIF6cmDbeV8vSlyREmrH14xTXG3y18e94iwImV1LVrXMbrQ%2F5OSLQ1ltp2WS2fFfaqvk8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105141fa9aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1434,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06ff7119039a86ea843fced4a87b0c04","sha1":"acf0f480f5288cc094e99382bbaaa21b9949135c","sha256":"f72d9dfe237a308134226955b517b808c348468794ccab477bbf478cd1c49007","sha512":"30b10c415d76e26ff9105a1803919314a81a3234d1254f3210eefb9e98ac35bc52ecb242a7cc2dadd1f01ebb3a0cf4bd774e6cba135cb89fb416560c18c8b58a","ssdeep":"","tlshash":"b921e0bf97c536d0d56beba0d8138022f2b7647a3b2c8b854e74cfda530e059c8d9460","first_seen":"2025-09-28T11:01:39.207607Z","last_seen":"2026-06-01T14:38:39.403345Z","times_seen":78,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/ai1.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/ai1.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-2d31\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BHvn6mHHlwdBoO9wNBR%2FNzjW%2BQZa58iuKpO32jY0M14GTHzrbJhusWHJCr6kxWjeEgxjGgpL609FbV48GPBN6tqJH%2BE5eOwPcirN6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517faacaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11569,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fad7f348370ad25512357d8c7c20b3ac","sha1":"a451230898d83bb5a76762e1f4bdc9deccf49462","sha256":"b6501107cf61530810ec864b8d58f3ec21275ffa0467d01a7a969663588158f3","sha512":"1510f8c8cf0d9c49b23035370f90fc58d88300d3c649ecc29b8454296f967c16e6cc8339eeeaabbd6e6cfb1c9cacf26d48d06b41d1351070bacef700092aeb91","ssdeep":"192:oreDaEOJ8rpKaEJtym9iiSEYrydZm94rUD3o:oreDWJ8rpKRxDS4YE","tlshash":"4132742ab3aaed7af140d3e8ca42c035215556e37641d1a1c6e06f6fd8201cd1a7fdcb","first_seen":"2024-10-31T21:21:10.384677Z","last_seen":"2026-06-01T14:38:39.501865Z","times_seen":166,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrxYx%2FFKL6Vtp9NpDWH7wuWBR%2Bor0NmHgO3sObbykUDxzFdid88nH0xvzLj3Uz8p5XneHVQ591bRydBDfwHoGldV%2FqBanjJ4422sAVe%2FZfeeuKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8970aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1754768276874","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/65747cd90abe44c7a66f35d017b6952d.jpeg?2.2.1754768276874 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWzYQmHUsECoONBhBFFYdvne6orVGLmiQaMvXkrxbq06ypHLrRbwa4MuRpvQreKezm_a0x8iYcE\r\nx-goog-generation: 1745019079859499\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 3817\r\nx-goog-hash: crc32c=nHBXww==, md5=+nrXU3XMeAaFfbxtWQ2yHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 3817\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 13:58:34 GMT\r\nexpires: Mon, 02 Mar 2026 14:58:34 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:19 GMT\r\netag: \"fa7ad75375cc7806857dbc6d590db21c\"\r\ncontent-type: image/jpeg\r\nage: 1080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":3817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"fa7ad75375cc7806857dbc6d590db21c","sha1":"973a54bcc76c2c86ad0a41a7eaccd8d2a2686a75","sha256":"8ed69043b1cea67b8ad4234d9fb6f18f44d424aeea7181930df009866ea5a452","sha512":"3934b78cb9f04296a8792c7ebd652454730ff8c5a97a4d7c1d6053f634a7d029d0577c20cdadb822430b57d5e59299f8e4564d9a2f4d84c8c08f10fcb3b43a87","ssdeep":"","tlshash":"1a718d22ecbbc800fc15db1a6d5b6562313b36e314d4e9f716cc0dbe2e1670486b0123","first_seen":"2025-08-29T09:33:23.930899Z","last_seen":"2026-04-07T11:52:26.857898Z","times_seen":87,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":195,"dns":233,"connect":22,"send":0,"wait":13,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/vendor-C2lpsy8i.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/vendor-C2lpsy8i.js HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-222a50\"\r\nexpires: Tue, 03 Mar 2026 02:16:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlzeZCUbRFkgc%2FxkczxjHdmEqCuGhNpUm7Jrc5VN83cyc2QL8FXTFZj9MrOtrzer2uFXJphk9yVDQKehmndhTs0msI%2FTJK%2BKvt0Bpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fcb99eaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/common/getMt5Amount?coin=xag","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:30.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en-US\r\nContent-Length: 2\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:30 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ntGrI0BqA1GkaCNRCkuKxzJt2g2DQ6gDJrvrqvNgwhn0XlufkSmpxcSijm1F%2BKdRjm19m6pi1sXBDFlEyjui%2BjBAvQCHDKvIIRkf7gtPcwKNP4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105074d82aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"bfe9741b5ca101b6c591dd1da55b0a3a","sha1":"76daed7e799da6851572496bf3c4881fb77ccec1","sha256":"32e04b0f97d506d2f92f55036c8069f96adf7d3698d37847ecf9c529251146c6","sha512":"189c4bd8b8ed2a0feacbfaa32204061c22e074a40540fa32f6a3d1869489dfa0c5c8094d3dae2abd9025ab830ea0d60891fad3db11c9001164cd03df4475948f","ssdeep":"","tlshash":"4da02208fc0880c2202300830223020000f0208c23000b08fe8ee230c20023b30c38a8","first_seen":"2026-03-02T14:17:12.375769Z","last_seen":"2026-03-02T14:17:12.375769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2F23RcBZ5tTJUBL7Aym%2F3OJLbMkBsM2wco67o8AwqN8F4IbXS4VRt0nf1Y52h54mvdfcimI15RIA0Al3p4EJS%2FfSAIcGX4eGCL5RjYTEzonO%2B9U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8967aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"doge\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1hd5fSQRkdPQRkXDtgnkc%2BH0TjAtkqDC7%2FyU0jvpvTh0Yw1XgyyOm2l8gpQpOoTF89Hku9VS8Q0pOTZecEPscGBwYrR%2BtKS%2F2r1qjUk8zq7YLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c0dc8aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40840,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"115dabb9f663becb0b8c998369dc1fba","sha1":"4ff7d30510c44b4f68ee9007aa67247a27875f20","sha256":"c7b22f7ef0be33aefc0771bd85bb22a4e50ed0e3bfaddf014e5f083ccd1f724a","sha512":"4ceecca7c254c7db18753969c147810722ec24babc0d73354fd7744f3d1cddd272cb865f8ce5ca26d369e1bac159755009af56f2f10584d4fd00eb4ccc2eae61","ssdeep":"384:R7sIriP5PqSaoWgJeLBtejrPHSfORd4/wDOSrRf9Pimpgw62cmRixg:y+E5P/WVuTmI4CrGmpgw62cmRixg","tlshash":"620384345b8893a9d4318cc76fa3beb0261639c34acd5dd521ef0c0d7a4136bd1a5bba","first_seen":"2026-03-02T14:17:12.377495Z","last_seen":"2026-03-02T14:17:12.377495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/chat.png","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/chat.png HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-279a\"\r\nexpires: Wed, 01 Apr 2026 14:16:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNKk03sWJ6%2Fm0dNLz2uliCnmqFUdGMjJVMaY5RLR1bx7sie4ObvfEcuNBkKUOSQfMi920cp4pLWHC4NIjLjiWpi%2FmwmLrgkPR2lDdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105180aeaaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10138,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 391 x 391, 8-bit/color RGBA, non-interlaced","md5":"c0b8583d102ab70eb5a9cd4e1ac47c2b","sha1":"ecc2a351a680d2c01b7070b167755e1d9c088de6","sha256":"33123e4b44608f7db2cfc5dc0e6d0fcf0cb06c5e8ac056a637e43dc79a55c407","sha512":"633def91d6eea6f4d338b49bc2d0540eadeb278b6510c824d8e2edd6a0d0bc6f205639cabb5db6bed89d6f7bf1fea63a51f8d877cc0592528b288a6e37210207","ssdeep":"192:LEJaISqTHLkndsrQKyeSZD1sOikJbazA0PkQJprNKIOqJPj9TDiXVLJxkK5DX:LIaI7HwndscKy3bziObazAWkQJPKU1DM","tlshash":"b522bfcd558e4520a9e9203191c6631adf38e9ac7a5bf6a1fc31c4c553a2ce2e74b618","first_seen":"2025-10-12T16:34:39.749254Z","last_seen":"2026-06-01T14:38:39.480971Z","times_seen":78,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"dgb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZEZV3yW8NnO2P1675i4IL6l5Lvfs7gzP9mkugxwZvDisGeWhMHSSfDKomaaAihXeIpBbIx2ehgO1Cme1Q78yLAhT%2BGOlFlee821GweL35Ujfr0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c2e3daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40154,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9333b114383294948aaf442db40e917d","sha1":"2f7f426a667a24f2c534d3a605ecb22aa3688173","sha256":"9d5b91ffa47be185e3b147690de5a2691a280ffd29e2ec7baa97f3085eeb1fc8","sha512":"5bfae8b1c6dbeef0133c8bf132bc7dbe0352fd77aebf64702f48064b0406fb5db9b0ba89849cb8ca8ff99e7bcabfc0e1a7a4317c5a8b00429a222be112125c22","ssdeep":"768:4td3ShelsoX0msJ+F2EeAOdzMoQkiDDmUQwQuIXF2E:4tZShelsI0mQieAOdzMoQkiDDwuIXF2E","tlshash":"b103bdf1aa88d1cac532fc8a5f83ada006153a934adc1dc145fe1e3c7a547d2f1857ae","first_seen":"2026-03-02T14:17:12.37993Z","last_seen":"2026-03-02T14:17:12.37993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 68\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"metal\",\"symbol\":\"xag\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pl2aOKYxnuUeoiWiTYE%2B2kkA4a95b0%2BUlrcPzwatPrbiNB0oThUgfivPQVA60ootVyvZtojgi4Uio7eQ9F6DZBtfQeMtsrezgueQHLEAICWiQmI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c3e51aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41732,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3cc4bce7940688446ac27bd61fe1c758","sha1":"e8df8a17a886587753c434d121065bd748ff72f5","sha256":"8b5656817b06ed3266f6912d8da33f1f1501e570b2a0f1a85d91c7505e076a9a","sha512":"162a0a505bb90dd9258feecc42708a099252155f6dc8f4b771c1e8f2558affe8d5ce552d64711ed9d43fa00c9d8a84c3fd0aea7b3f12f9d060d701dfc45d1dd5","ssdeep":"768:jBOO5kHdPkECbh99Tz/2VAUORyKUkkgFapYI6Q2+dcAnW0I0b3IVm8mnF7:J6TmoYIf2+ZnW0IwIg8mnF7","tlshash":"0113c138dad9c2c9c4319dd62bf3bce05a6734d34ece0d51459e18203aa6f3be915b86","first_seen":"2026-03-02T14:17:12.381832Z","last_seen":"2026-03-02T14:17:12.381832Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1754768276874","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/ee8b3c1060024bf498dd012256182efa.jpeg?2.2.1754768276874 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWyaD-8xJFPxo44QMD0hrW6oXDIeHJ3gzuy70RU1-XaATMlYYKWGLX41lnBCi-PrWdk\r\nx-goog-generation: 1745019091846695\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7177\r\nx-goog-hash: crc32c=KbQ4+w==, md5=umkw+KKOd/Vlmi9C6Cp6zQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7177\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 13:58:34 GMT\r\nexpires: Mon, 02 Mar 2026 14:58:34 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:31 GMT\r\netag: \"ba6930f8a28e77f5659a2f42e82a7acd\"\r\ncontent-type: image/jpeg\r\nage: 1080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7177,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"ba6930f8a28e77f5659a2f42e82a7acd","sha1":"a8486aa615dcb5fc601f66289b55a5cdd08cd8d5","sha256":"8bf7252f758e4f74fa910c3f1935501125d6589f26e2e2c8f397b3ae6ec0fe53","sha512":"35ee8e31b81d5474c5f1178161d3f908139b65e1f33bc30db61618cf0d4555bb38d0e7a6ffd06d7562ca41f51ab216b37320bdb29a968c891badff668a924051","ssdeep":"192:BnyBvvQqY4kabfz3lryvlFnkmnXGCvY1JBAQ9:By5JY4kabLZqFkmWCvKBAM","tlshash":"64e1af75df14718adbaf951d0e9e4440d2961a4a5cb2c30ef10c7de2eacf422531e836","first_seen":"2025-04-17T23:40:09.002327Z","last_seen":"2026-04-07T11:52:26.909048Z","times_seen":88,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":194,"dns":162,"connect":23,"send":0,"wait":12,"receive":1,"ssl":165},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T14:16:28.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lcgYh6tjOJQXhMNN5ha8m33kEvCBJyl9P%2BEmjDcrek02hPwd1AnbakuKg%2BS5eLlsXaOL56ioA8TRbIcqR8JYq6enJLteykBcTfGRKQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d6104f8bf2b5868-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8648,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1150)","md5":"7eee7183de073c0cc0c2010c753b8d43","sha1":"44ed1c3a4d476463f36455badf8481db02dd93f3","sha256":"2578c71fd509b112f59fb65427a2502ddb7183476954ae5405d8ce73cef6a5dd","sha512":"3ef4f574e0b2b0ba6c66a3e90bc33610d6ae24b3b2cd8ff9f0b5998f9ab52210e033944ea78be0eb7f3a3ef190f461aa7b815cdf23e28ba821558a96abc249a4","ssdeep":"192:TFNXUSHUqRGMRrdiWK1FiUm9Al6ZIJHZCxfV2nftZbKuB1Xiaiifo:zXtU0pmBZCx927SpiA","tlshash":"060282671db0e81e23a34236abebf00459708143861dcc94badd14ed8fd1fd988e7761","first_seen":"2026-02-25T17:50:26.82845Z","last_seen":"2026-03-02T14:17:12.384207Z","times_seen":14,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":35,"dns":1,"connect":8,"send":0,"wait":231,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLrN0I8%2BfSoAgqJ4GkS6wZrULEqoDGDzGvOHDJN8vxU7IepHfAeyC4QfO85%2Bqq7hIqt3e2AEEyo5QoLSHn5QyIVzb27tXIM582NKPAWKz9Ifd0k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7939aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"btc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WRpjn0785c1midulvzX60d3MjPKJECzCpBUj0Mk9ekyMmW8xYeZ64MKnzoRZQ6CC5y0KnTOqx9CH49BJuw086K364Y5SfUgcxlBA3pXF1PiAHM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051bfda3aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42395,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"7b00f3a6d36bb7d64b4a521fd0ab31eb","sha1":"9e658e35f51836d3e010039b1d180c5dcf1c3f5d","sha256":"d07341f3e9cce4c1d04594f43703f1a29c7558e042c7b4a52c3d4778b63d31af","sha512":"eef96bb9af97ffc467d5df9e50c88917a3fee0b28e1d4337205cb51c283299dc61b77305e1d3df7d9ee1c8baac620eddeea486bbb53f9fc49f9c6837c60245ae","ssdeep":"768:LFgIT/j7hdJgMqGZlnkNqLdeB05LwFZRgFq:zfJcNqxeQLwFZRgFq","tlshash":"b71302f07bc8c19ae93ecea74bc3acf0855677c306cd899661ef47116a94233d504b92","first_seen":"2026-03-02T14:17:12.391203Z","last_seen":"2026-03-02T14:17:12.391203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/banner/1.jpg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:32.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/banner/1.jpg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:32 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-8d53\"\r\nexpires: Wed, 01 Apr 2026 14:16:17 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NjvS5f0aQrQbi1p%2BjLf8MQG8BJd4bvAYQczfHen3iePTsh6ihlefV3vHn%2FE9osSk7XJ9Xk1VK2dEqQYDUfRcNQIeiyx6ZUjzTWWXuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610513ef4faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 714x400, components 3","md5":"e58429ca30e42c6a30fc2a6952b6627e","sha1":"a9012798d41ee89a4b10fb8b6679a3d4aa36b12b","sha256":"0cd45dd6b5188cf087d1908eda005d6b6face1a3eb9b3c4f2213166a84b87124","sha512":"65de29c1b05a8882ff303a3191f9d6faef6428cd7cf9afbe3048a460971d1476f88a65ac4333c52d12f7543cf35f3fd81385e6b9aeb5f255106dbd13336d2911","ssdeep":"768:16ikoFtGa5F+mlsHe2PTphfS83Cr2yfiAS+dL1Mn2CDbIQY6lskUXZkmV6WAtzH:DLthrp8e2V88K2kxdU2wIQ09X7tA1","tlshash":"ebf2021ba8e0b1d3c65f82787617349f4d07e7057802ad4b37843ba6ba0d771b46e6d1","first_seen":"2025-10-12T16:34:39.842006Z","last_seen":"2026-06-01T14:38:39.448727Z","times_seen":78,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QjKpIDTEjObemeOnpzaM4djw5VdkF%2FuyPs0xLs18jTWHvTH8wmeSm%2FXgPPIRKwXIhafAEdyHaii%2FyniWeclz36Xq3a3zcJvpnlEdGnatUQqYjYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a6912aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"trx\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRJBYtTqGY2pnY0s2u1Z6d961L9zmZ6OaTbTRFfEEQCbvYUt7bG1J92v8BsUnCAhZP0S0B%2FuJnMMNb3cr%2B9Jox9YLwvJVA6a3ZP8g4lQkX3D76k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c1de9aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38356,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c0190e848991478d13c9363e7de2b858","sha1":"cf66a592987538e4c76a264709e626f51ed17dc1","sha256":"f01b940a9e58bbf7e6a9f78a060fbbaf5fe6d4904ad3020699922bf4efe75f52","sha512":"340af3cf127bc587e8b4d11472fd7a4d33c52c8966e520c295fb002f07f836aa18f9e68615ebbf9e0c7da57496038fd39e2c2e438d8b9c1e83f93d0efac59769","ssdeep":"384:H8B6zE+wQ6cTsvOwSuLFGJbXEPOLZ1TKs5Pmt7LvSDYAU1I0uxd72tWZBhZzT7Q:H8B6zEhFAzZzT7Q","tlshash":"da03b8318a799249d935fc9a5f83ae90150d39c34eddf8c3849e1c1ceed5261b3b23a6","first_seen":"2026-03-02T14:17:12.393655Z","last_seen":"2026-03-02T14:17:12.393655Z","times_seen":1,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"gbpjpy\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SVHlegaPSjl8H8%2BSqYbcECp3eX3Mp808jGVwndl8PpiyW8%2FrhBg1jOBJzcbIOZA%2FOzm1dU17S0WE7fsdENdeyK9BhDMuSsuqCYaL%2FO%2BjIV%2FodI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c4e86aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45815,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5ebe155134876581ebfe48c3694314b4","sha1":"01c005c63dafb6b3972bdeb7cfc56dc8a91b9fb2","sha256":"30ea9121c351e4e779eebf5a86d6f2fa7e438dd366c68aed986e33fd7c65b296","sha512":"c812a6f3235dedcf1e805899a8a76cd77c31f888082d90777bd1c002d805413ffd87e5db18000bca32e2279455c9ab68d7a76ed882f05f32ed229af20731746d","ssdeep":"768:Qy4a+R1NGfmh0SOaWyRdYO3zf1GZTC6Gh02Rk:QyYRD9OaWyRX71GZOFh02Rk","tlshash":"4523c3728e8aa14cc4348c925bd3eff28e5333d356dd5e013eaa64522e54326e357f86","first_seen":"2026-03-02T14:17:12.395005Z","last_seen":"2026-03-02T14:17:12.395005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":347,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1754768276874","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/2faf9ce6c56a4d618efe4953d8c024ce.jpeg?2.2.1754768276874 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWx6tRV5QWE6TcGJc3ejrSAR3Suy5t3wFmPw3xdG-NF9Y3FMLgt-hI88yt76028GpnA\r\nx-goog-generation: 1745019064372382\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9740\r\nx-goog-hash: crc32c=d0/XYQ==, md5=V7VWqtqhYHeDi7LvHTUU0Q==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9740\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 13:58:34 GMT\r\nexpires: Mon, 02 Mar 2026 14:58:34 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:04 GMT\r\netag: \"57b556aadaa16077838bb2ef1d3514d1\"\r\ncontent-type: image/jpeg\r\nage: 1080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9740,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"57b556aadaa16077838bb2ef1d3514d1","sha1":"f85a35bca10b9f1edcfa8c1697436d9569f4cd2f","sha256":"a657211e0a7d76e9c8e536f6c99e1bca3b335e42d03c857ef1615ab3f4675da5","sha512":"48bf1e4b91578de3c293203a774faab28de03c1e0cde2a734ffa867243723851614b0d52e89c6af368f470edf69dac8184c3f7b13840e38100f01ea1297fb8ff","ssdeep":"192:jvVBLKx0QCmJhGtRfIUiN99uvV6TJhDgYxBVtoBaye:xox0Zc99uN6FhD1BtJ","tlshash":"8b126a17ad41afc8fbcde36894ea1b3af363e62317ab8205402b591650cb93c480f579","first_seen":"2025-08-29T09:33:23.939266Z","last_seen":"2026-04-07T11:52:26.970303Z","times_seen":87,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":178,"dns":230,"connect":21,"send":0,"wait":8,"receive":1,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhSoJ%2BcMVPNQK2Y2UicFKpYXr2bfKLqJCMsx4JAH1xQ2Njrd7rLd%2Bed3R1Of%2FF8%2BHBWj%2BEcqwRf0T3pr8nJ8iPFeKrMtLkyVHA9W1Cb7WW1dpw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a690baa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMvhPmgSRLYE03MFu3TckgfgQHnH4m7FLq%2BgsuRsR6e%2Fif3Fq%2BUW0Ecr8OhR7%2FBvPuMezeabyYwee6ZAljEzli%2BqRJJ6zCKezbyBe48cX3UOyH8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a792baa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRx22VxnvFHW3DxnJ13rJKf%2BDC7mUegtUkenXQjWAu8cjfWIhQRaXnShVmIB25J6cMCUkknsd2aRPNvWX2QH04YjbdlJGkloFTNi1rHSkq3ewpU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8953aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"link\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zqb9qokY6vIlMGU76rHAAFcuR0AnCgQyrSvi%2FS5Zz1VcCmYsisuk8k8q%2FkLLZo9L8D84WV%2B9xV%2FilnOChQhZHDUwsttI40NZ3hJsUJt5fLoLPrk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c1e12aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34087,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"04a6356e47f58807eb80e74c51aea254","sha1":"8d789cc6db4feada1d0d3ea608d467e769388e9b","sha256":"6db48082ee64302e1d130d3002e994fe6d964ac55a1c8aa6ba86c1bcd3b6868c","sha512":"83ea2700bf425f6b99b8cfe42a62d1bb68ab70cd1eda64abfef04ddfbcc7fb30bf1893764946e6f9fc3cb7a8eb04971057a8e39e3d1bb37db64eb0d2ac0743f9","ssdeep":"768:z/xgFozo9l5jiD6wTKMN4e+P/HD9QgXPm1MI7PTQ4LUsh/Frk5Gb4WQKFvKOU7YH:+FYLUsh/F4KFgtT/NCzcKM+awcXQF/eE","tlshash":"efe230305bcc920ac434adde1fa37ed05a863bcb46ce8dc181de5ac17a5af72e145792","first_seen":"2026-03-02T14:17:12.407492Z","last_seen":"2026-03-02T14:17:12.407492Z","times_seen":1,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwmnQsAvKooW0zsWcW1QgKVyU2TIl8Ffz3Kb1rYgJ2L0nr%2FZvfLxBPxXySRZ9GqjlqEEznxKfYU1R7sKd1Z0imh8UBbBwM%2B1Fy7zNLEteakgL1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a6923aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DwlQuvFsJy%2B%2FMeFNwt%2BHRyAHCunTutV2ZDDO5NqGBlMW%2BMdFn7wohEL8nAIFQrF6vayvZSOw8nY6emUS36Hr9dv8JMrxHlxcXOtRNkNqDHSw3E4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a896daa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejphulknVm8YXbqo%2BY14AFa%2BzCHHD9VXTAuq3jNf18ZvxC6%2FcusikBRk3fxncEj%2BjMYyUJ%2BfYhRj70GsNt4yXg5ZxuLdRjodMg43FYyfhCyAfMg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7944aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1754768276874","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/06368c6873eb44bb883a140223b29d6c.jpeg?2.2.1754768276874 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWxQPrzuYSFJKmQKSXEffTX4tjVFz05m4ijTAYbymyH87WZjvLnRaSeBgKbH8zh_166JBhoOwr0\r\nx-goog-generation: 1745019071782236\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 7196\r\nx-goog-hash: crc32c=tCfjHQ==, md5=kI8WMgoKMsgRfKlDwqojHA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 7196\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 13:58:34 GMT\r\nexpires: Mon, 02 Mar 2026 14:58:34 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:31:11 GMT\r\netag: \"908f16320a0a32c8117ca943c2aa231c\"\r\ncontent-type: image/jpeg\r\nage: 1080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":7196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"908f16320a0a32c8117ca943c2aa231c","sha1":"b49e31cd823528649adf1b0fcab343e4e6055b33","sha256":"2a03254b988fdcf3c84ae977a221b83ce9d10f896b0ec508fcbe877c22ad9161","sha512":"531db683a9c449a6d0ace9b1e73a6bd3561c54d71f0421d4255b9698d7bd12c74779b7805cafcebd0fd50c437c64f29d6d761af58e57fa57874b7df5cbe1c06c","ssdeep":"96:cmO7bsMr5XAG3VBRynGlNqbRuYrkVkls7VOZ1d3AHI1K9v3Tv9Cre:0xrqGlanNbgYoWelkyZCre","tlshash":"8de19de8986016208ecac5f0598578a3d4f893cabebb7e4a44896e01c6555ad3f52f34","first_seen":"2025-02-06T02:55:20.514077Z","last_seen":"2026-04-07T11:52:26.924617Z","times_seen":91,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":178,"dns":233,"connect":23,"send":0,"wait":10,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/cooperative2.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/cooperative2.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-66cc\"\r\ncontent-encoding: gzip\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLG8yhW72kynzpb6%2BBcp4VcjxqHCekRti3M9ueh8mcSP8X0GLpZkGRAIrGtlN8n9mA0UvNwgkZWemHHtimCxXSOEoxFP6dTQXgaFUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6105181b03aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26316,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08074ea43880adbf9fbfad6a2d55a9e8","sha1":"2f4ab87f2c0b5ebe3dfc5e35f18e68e829eef4cb","sha256":"15925b5ec9e0a2eede574536f72ad65ddd1a233305ebcd86ffebac23c4c6bfc7","sha512":"ed8aa7f50977a8ca59449bfe1a021e91c3fcd2c2a7978a0db475494f6b632fdacc72d47a1115ca077ce0c56fb02b470130199f38a94346d16bb2982f857c4ca5","ssdeep":"768:Jfs921W6+Jr1TroqmOGuxCdvPtvMW7MOKKiqmCOJWSvrD:Jk9217+x1Trof9uxaJx7MOlxmQSvn","tlshash":"34c2bf38f1090ccfd7c5621e7731ea685e87a06bd75c9102ea48f58672aacc25d6d0df","first_seen":"2024-10-31T21:21:10.392907Z","last_seen":"2026-03-02T14:17:12.410537Z","times_seen":105,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpypVeGx5pbo0Ia3rr93UqsvJt1ATQvFrAyIElspot%2BjUGboPJT%2B3ZlWUP8cOF0iCqc5AMia%2B%2FPdqFcyBlRJavqftTAyYO%2BxnBMXzuBmQDGClNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a68f8aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ow37mh755R44n4km4CZAjQIWjpWUpgwY2sDel8KILAnfw6Uy0K9XX9Uf9%2BNgzK2p1uKIPZvb6phtvsuz0ijFs93VasD%2FX5v9wlCI2m6O7xSrSR8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a7930aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5WYGFcaydVE0EyQ2qtw84ecAWZW%2BEWgMeFERILTpTSJ4YTdW8f4wEQytcMNgX3olThPgtPLmsZc%2FWGxvtE41ZFazc9mpGu7nYFLE5PicCKcgRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a8955aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"tlm\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbjIt0ZRC%2BGx4NbfY7Xqopyb4XWJA5CJDnoMx42Qwlt%2BF6dL7h1W%2B1WaxEbOt%2FVudSbOV8w%2B%2FpD%2F3MzRr%2BGQ3KkYWmgGacFZ%2FdeXRDCZnmf2pgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c3e48aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42825,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f8c734fbba4aeff5808e4a4698b0cfd9","sha1":"6c5a5648211e23485e5098c95df20ec7e5286f9a","sha256":"0e68ef15b891512e496d9aec6ea49527d16f4197c97a92fa10c3fc08104a976b","sha512":"4eede3b044989dd0325b3004d5c029306a496c403faeb0d1f325b8ca2524462b34d5caf73746f0ed5b30dfa2b3411398176ea77acda810f4a8f5821ec76fd553","ssdeep":"768:lUZe+dgdnLSUAOQ+YW0JxYb/bhdWp66F7SSd:UVdgMUAOQhWmp66F7SSd","tlshash":"36133ef44a8882daf531bc8a6ff3bea0071735d30add98c114ab9c547a453d1a19d3af","first_seen":"2026-03-02T14:17:12.411443Z","last_seen":"2026-03-02T14:17:12.411443Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 69\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":69,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"mt5\",\"symbol\":\"audusd\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VDm%2F%2FrCXGK%2FJ%2F%2B73KnHhZ2e0dHw2pGoozG6M4RAgqXcM2Gv4%2BnJ80Oq8%2Bruo0qjx3wJrR73TnRsv2uDRgYCC8tL5IH%2BoRSN77LaTEti1A%2F0GJH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c3e57aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43276,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"b92f403718b4b42cf189a8d193ce6151","sha1":"01ec6f5d0d986d0198be9ad49f6a4b2e1610ba4a","sha256":"f5d1b12a8e2bd900cd9467c26794394fde527aab8337690e7f86683c01617e96","sha512":"a3a130eed538fba3506032c38a8758bb0564ea4f8411798d7780530570aab9de7af344e27cebdb7f14fbfee84823153259a69fc8b3d3c057f630bc867b0155d4","ssdeep":"768:hp+PXF0JqV370apjAi/iO3I6KP6m+4Nadee0v4ZCm57d02ftR6unKRQ7:hp+PVw+5BKP6m+4NaL0v4J57d02ftR6Y","tlshash":"c9136c304a8c92c9c530ad9e1fa3afe4171239c747cd2dc605fa1c957b54af2a9853af","first_seen":"2026-03-02T14:17:12.413119Z","last_seen":"2026-03-02T14:17:12.413119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/ac-chat.js?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /ac-chat.js?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:30 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37a-907\"\r\nexpires: Tue, 03 Mar 2026 02:16:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvWTSOB4vLdEF18iVqLOXOSMLc3rHeCGUg8Pu4gROPpQcr2qAIZb0yupSWnKg7%2FXdhwjX7hpy5XhEsviGNTXp2SazyfFycL4hlTtHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fb5d57aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2311,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"f1f22e1c3f1ad317f0c10100fe4ca88f","sha1":"b16c8c959d49458db1ef2f7b734e135f5ae96048","sha256":"c45bfb2cd85abd4143b76d5a98376b94c134c88f56f8096095ffe30cdf3f6ccd","sha512":"952b7c83e041d344162e9a48c48a98120835dd227b53bc7bd1efc02de267b3a743ddde8138150ec9f0a61adfec7b04b2eacf49820f1605d443f2a6714fc20563","ssdeep":"","tlshash":"e441aeab47794224c20b11e32d4660943232a01fab4a1d3c79fc60d8efaab7554e1ff9","first_seen":"2024-08-29T17:49:52.044057Z","last_seen":"2026-06-01T14:38:39.409214Z","times_seen":133,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6Hq3nXJtCbgvzs0ruWZq%2F4g96aLl11qxl90y1IabFEGqDOGY7l4mkcfrAkk%2F2V45tdDHjHb8xu5VtXGIHXdkIlane4C5zcUfSHZ2%2B2NyNWyQuI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a691eaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 71\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":71,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"coti\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cRdBkwONhLhxylSebnx5JVWFro1YzTWqjdnXsrf3VYUI%2B5xHFB5xS4uXM6xIrRBE6LLNHdS%2F7zr6h8ywgXZFPQ9gRZMUYKPL%2FfuN7YLe6nZyIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c2e28aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40103,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3ac0373a70c0ee988607b2caf7c16eb8","sha1":"eab979c34abc4d8e69f67470386e7aba5eadfd1d","sha256":"b04d3c403a30aed7899094ade074dd58a61e45c14ac6cefd338b16e1fe910e37","sha512":"7eda1c3f20fa8039f306a02d8d81f96d7ea5b07c85ec7ed1059b770a67e1dffa4f983ec094d67701b8466bc3f0a0c698374444c89cbb0c461274f6adac61f0ea","ssdeep":"768:jPmZkPAgzZhBz0/r+GQKWA1Pmemm3fjDOEvVRRhSdPtKILY:jPmZkPAgzxz0/r+GxbPmemifnOEvBhSW","tlshash":"740394744f888696d63d8d8a2fb37fa1125336c74fdd4dd915ff0c0aba40262e1893a6","first_seen":"2026-03-02T14:17:12.416742Z","last_seen":"2026-03-02T14:17:12.416742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/vendor-DTndZeLc.css","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:28.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/vendor-DTndZeLc.css HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:28 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-1e27e\"\r\nexpires: Tue, 03 Mar 2026 02:16:13 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZIkBSuNi4QhVYEW3%2FEoso62xFJfc8J4fcyNJ15yhiTCek7NKN1vkqFuLINWwvhYTIQW21H%2BtIdLBh7d3wl%2BNrIV8rYNTg0I5ysjjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104fb4d4faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123518,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"60e829d98d770fcdfcf80c4c6e1570ae","sha1":"158df580617e2cfa099d0928603ea3ac114fe89e","sha256":"416aae7740eb771bc3ce4e4d77e34359a77d2b2801dbc0c172a231e16cc51e8d","sha512":"3e68431b09b0716f6c2003ca8c2dd49f521cf0e83676e6e354524592d82fbe7495804a18e63b5d7a7a6bbd92f52c7f528ae84832ed36809a32d8f3348ce2cc35","ssdeep":"1536:BtIyNBi3MFYaQj7FCwsBlDOFIxuVox8DbfYIG1Ah5aIzW:BnNIClDsIxuVS8fBtQ","tlshash":"eac3e5a5e6c491fc6f2bf2649b8766d8f23cf661dd01daa4f105515c0ec7bf10223a2a","first_seen":"2026-02-25T17:50:26.830066Z","last_seen":"2026-03-02T14:17:12.420729Z","times_seen":13,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"h5-api.arrerly.help/ws/264e0ff8-4985-49bc-af7c-09b8e6a14fd6","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /ws/264e0ff8-4985-49bc-af7c-09b8e6a14fd6 HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://arrerly.help\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +C58UgoWE33cL/SrF42cxw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Mon, 02 Mar 2026 14:16:29 GMT\r\nContent-Type: application/octet-stream\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://arrerly.help\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: SrnSKHiT4MYfHqlbU8maIc/jKro=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MqKp8iMGKl2Gg0i%2FpgQdnXJNxrRceMyxHiIIu0F9fCxLCsPWkEoY4%2BsmTNJCwM0Vl8IeqFW6quL9nSf4snSrOrKMXx7r%2FEy3i8DtiWaN76h1%2BXXLXMVTGea8DWUS8eBvQcXasGmq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d6104fff909c8c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=10520\u0026min_rtt=7475\u0026rtt_var=6155\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3114\u0026recv_bytes=1196\u0026delivery_rate=259932\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=481e09f564754a1a\u0026ts=255\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":53,"connect":60,"send":0,"wait":227,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/platform/vaultonic/logo_144.png?2.2.1754768276874","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /platform/vaultonic/logo_144.png?2.2.1754768276874 HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:29 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-3f280\"\r\nexpires: Wed, 01 Apr 2026 14:16:16 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 13\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ih%2Fox3vFsdkAZ9zWpQTPmWYzMJmyBtj0iqOf9YYoe9sm475Iug3LrDekthVYQ6pEFRJNvdNmRFiXRkMq3zy%2FcPZD3q39sShDly58og%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61050289a1aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"80f70d88d8223ba7dad6c7f197b1f75a","sha1":"6e39c62a96895988474afcef0072dab781dbb7b3","sha256":"6a662bf9a3fcb8d134d1147ef1f2aa59de6c11db02d14ee0868e323153abb5d5","sha512":"8bf74c56c73576d7178d7fcc36b0c7cdf30871b1b3b7043506f4b6de3c4bc117ed8b0608ecf56aaeabb19b2b10073184df52273f65bba85eeccf26cdde873333","ssdeep":"3072:vO1Apa4r+wfe1He4fB9E3phFeDxibkTITaZ1rN4IlXlnjKzSX/q0nGAkKq4a4Eb7:vnpaA+ZekkwU6PN4mFN/q01kBbWJti","tlshash":"5844238d9e05297eeb1633ff99b327a8b34ddd810f73db2b6112505b5213a906c1b34a","first_seen":"2026-02-25T17:50:26.789678Z","last_seen":"2026-03-02T14:17:12.341968Z","times_seen":14,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/assets/vendor-C2lpsy8i.js","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:29.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /assets/vendor-C2lpsy8i.js HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:29 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:56 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a394-222a50\"\r\nexpires: Tue, 03 Mar 2026 02:16:14 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 14\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHzV7YILXzwM0%2BUpKA4zvzwuSb4D9Go5phGmhr7JYSWFL2spIcsdhq7329J7PFjefXrU5EKxTi9Sn7Dw2UTn7%2FYIjKCzowH0Tj9r9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d6104ff1839aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2239056,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0645d6d2b48d3980f9cf17cac85d13b6","sha1":"60e02ae0bb01f7fa624edaa696734ac43975a465","sha256":"f8558e5500eb1736d6167b88cfd33180e484b08e9089b36a9452b1d8ce9231ca","sha512":"581deded0fd745691703a370a49cccad4e41d1d1c1bca4c6ee7370d65eecbae9c7a5011eeb23182a8ba522d6086433dae1ccc0b89527735a89c05431b0bbf195","ssdeep":"24576:FN2LD4rA7kDbDVETSxXQZWAacs4yKd4vVa+URU41:FN2LD4rA7kDbDVdQZWAacs4ywGVa+URP","tlshash":"732509d8b651b03143a725a5007f050bf33a590db44f85a8f669e8da7cbd84e627bf38","first_seen":"2025-11-01T17:44:45.831131Z","last_seen":"2026-03-20T19:46:41.751492Z","times_seen":69,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/asset1.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/asset1.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGqgCKZBz8WEHUPX01DrrJjQgKZr1lzp%2B0%2FEZ4UkNWOCfWOoCeMWV6d4%2FtUxDeQJwU%2FLK0XY4XgTxiVsWmJhM1duAOyaqMKIsDg1qQ%3D%3D\"}]}\r\netag: W/\"6897a37c-34f\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105183b72aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":847,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ac26686188ac6a72ae7be703c2b2d9e","sha1":"eb90d8ac65d634266b2ce7fc5cbf42fc05853538","sha256":"68abb6ed5c28de52ac768a0be74e55c6c11d6dca98227826ff21b2d8554c0c55","sha512":"8358ac0e665fb221290b9cfddb5128d16e266628297efb0c55fa622729e2219419b6f2bd87841a285979d9c86a99a5c962be457b15d86093372f03589f8cc395","ssdeep":"","tlshash":"28012d0673059f3cf6721b61d308733461a26153a74976c9e9b3303da30815ee9bb6da","first_seen":"2024-10-31T21:21:10.307923Z","last_seen":"2026-04-17T09:42:11.430455Z","times_seen":309,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-ray: 9d610519ece55610-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"65692999-26350\"\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 238554\r\nexpires: Sat, 20 Feb 2027 14:16:33 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xqPlHOF2NzZ9ky8xzQf4klHk4caUp7ICEBRD8du2xQajQYjT3cfMaVItAxO6ZMdyS1oIuTv3JJ3bIEiSysz9UvBaKSQfRJ3bIFhJv2riLGWVxRYaVQ4BA0JS56p4I%2FOlAcKEBcwB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156496,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-06-07T00:33:10.440155Z","times_seen":42276,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":18,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/enK_.gif","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/enK_.gif HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-53921\"\r\nexpires: Wed, 01 Apr 2026 14:16:17 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 15\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eW6ZK%2BsTGRVWqc4gRjxhErfKKIxsBfNQBKSw4XnjEToIdUy5IVH38nf5HGpkyF6e8PYYC3XaoGNcroX8d1Dj5TIfvj1wSQVLIXXd2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517ea8aaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342305,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 800","md5":"0c213c1a489e987b78d7328cfe1bd840","sha1":"41e5a53e41ffe0cc4c99e8e98e0eb750117e9d18","sha256":"a4594eed78ebd1cb2ad30a28e026fad3c9046ae5b1aa71dec4c6b9702c12bbf5","sha512":"4da3afc8eb4803cff493835c4cc85ab57fc816f70943978e502b55736ada97b1858a8f1b1a6e65f150d266f1c42bf570ab441e951217aee4f2801a1262e3118d","ssdeep":"6144:2E/igWxC6ej+F9A18h7+Zxuvve8n37lm4Wl+DVAXQbo/N2mAbwBI:5/igWo1j+fA107+qrnrlu8ZkN2mtBI","tlshash":"da74021ed12702b19d3f1679f41f5ac8295fa92c05323e278ca0b5e64a4969f39c4ecf","first_seen":"2024-10-31T21:21:10.450985Z","last_seen":"2026-06-07T01:05:18.921393Z","times_seen":193,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/home2.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/home2.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 15\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OF8j2BCoTutbNDc%2FMPy%2FmHjUaJUUFf%2BtsC104am8K0M%2BwbhtJhs9ieanB1rEQ%2FiV8ETciQyVsbnM5VUCabYadZStdTJLjC1tHDsxg%3D%3D\"}]}\r\netag: W/\"6897a37c-233\"\r\ncontent-encoding: br\r\ncf-ray: 9d6105183b55aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"337287be056affbc39d575ff9e8f56c4","sha1":"9f90c22f4b460cb64ed26cd42fea1768ec43e706","sha256":"bfae9414975f365a81d3d4bc160c5438c8cb6c6a2583225b18708bc644619655","sha512":"7ea3f2393de9083ebf71163609b005d47fdc651315d6f9ce3328796479a2532e6e61eb846ddb9764687a5c808deed5f63da8992c474ba74e3905ffb825e1d0f2","ssdeep":"","tlshash":"90f08b27a21b9539d50425e190bc223676f1eccc2643c214eaac2120b678deeccb059f","first_seen":"2024-08-19T16:49:31.613647Z","last_seen":"2026-04-17T09:42:11.312952Z","times_seen":295,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/api/notice/getAllNoticeList","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /api/notice/getAllNoticeList HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1fg9EWOK%2BPdqYOKaAcA9CFoet5wX%2FYigGLNWrnj9T3pvnaYhaSw8frFAdrqmxa5CrjvCLlOGBMVjV%2Bp2vrk2cVF7oWHMZd0yw8cXdFtzdD1xr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a68fdaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arrerly.help/resource/images/light/ai3.svg","fqdn":"arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"GET /resource/images/light/ai3.svg HTTP/1.1\r\nHost: arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Aug 2025 19:37:32 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6897a37c-1baf\"\r\ncontent-encoding: gzip\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pxu0Uqc4iC9V2OpwZV%2FY9nc3jpwdnKH90HTJcYkT4Ug3WbaFqORXwER3dYMPsy%2B%2FaHyLqYGE0uknumhcBAf10KDjtynhCcaSXebUWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d610517fab8aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c53e7b1117a8526f6eb229df446cc722","sha1":"bd13b10b3d466c27cf406fae1a07adb3650dfd9e","sha256":"05d9270b980c401bbc75d3374fc10b459f661b3f5420d168daa5369d8fc8c48c","sha512":"0e693efa9349078257f94a89a7acb5f3d892ceba824440516c2c8fb88b71e937923ba1bd10b020d9cf2e80985fbd5f0ddefbf9176e6ad341a17caf9dfc7da856","ssdeep":"96:UN24KuLu7W0X/YIRcOMlit6YO+0hR8Kob/RfZcPRDg4rQA2EOAl6NkNLW4nW/1do:skuLu7CLOMlit6tvhRLlY5o","tlshash":"17e1652ab3aed97af148d3fcdb008435716640e3a951d261c2e5be1f982509d683e9c3","first_seen":"2024-11-30T14:01:13.939903Z","last_seen":"2026-06-01T14:38:39.487061Z","times_seen":141,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"OPTIONS /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,lang,language\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:33 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type, lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5CwQQCPXWR4lOsEWgy5dwHiyoEiS4K3wGKhNQIzVToDxxlIsH3vbdoxWCc%2BHHUJh5MRWtaU%2FVo%2F8XYVVAS4vjKClByDvpDpELsiSqIjDv95buY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051a690faa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T01:09:46.71643Z","times_seen":16198612,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h5-api.arrerly.help/kline","fqdn":"h5-api.arrerly.help","domain":"arrerly.help","tld":"help"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:33.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"arrerly.help","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Feb 2026 00:07:02 GMT","end":"Fri, 15 May 2026 01:05:32 GMT"},"fingerprint":{"sha1":"E1:2D:67:A2:6A:39:A3:18:59:6F:D2:AF:6D:93:A2:B9:6E:4B:AB:EB","sha256":"11:21:CB:40:59:A1:78:82:22:6F:D8:33:10:19:33:7C:85:8F:17:FD:09:3B:71:18:9A:E2:75:1F:D0:9F:B0:19"}}},"request":{"raw":"POST /kline HTTP/1.1\r\nHost: h5-api.arrerly.help\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 70\r\nOrigin: https://arrerly.help\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":70,"data":"{\"interval\":\"FIVE_MIN\",\"limit\":1000,\"market\":\"binance\",\"symbol\":\"sol\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 14:16:34 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://arrerly.help\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaOdHhAEPCX1ojcOHtUwSSziTOLtkd1dCEoyw2MCLxb7DYyzMtpvlYy9hV4xjZLdNMvq6GQpeVVYrX3K0M6y%2FZjWDGTkCRoUKlJ67pOpvFOOPZo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d61051c1df6aa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36616,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"fddbeaaa826025b3bf50731438345667","sha1":"44b6958a642a117f2cfc581836678ccf815f22e2","sha256":"13ddcbb4f6d6a57fc3619641db701777f57df2d26bd38f2f93aa516caa91325d","sha512":"13b0985cc2a3896aff31ed8c0d831f58a13cefd76f8dffa15cf5a7a4c43b0521d25959d4924ef2ec5319d2afbfe84ce22e6f260b8939abc1ed000b69531affa6","ssdeep":"768:4ts9Ww8ArIHJgUeghAsWcd8tKhZcjnDZNTGLLE+1R+hkQyKFurHetK8cQZAOh8fy:2w8A0HXQOE+1Q8HmGOO7HVD7HOHDJJJ3","tlshash":"45f2c238ca8ad389c434adca4f93fce01d063bc30aed4e5595ee69212997f67d705782","first_seen":"2026-03-02T14:17:12.426278Z","last_seen":"2026-03-02T14:17:12.426278Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"h5-api.arrerly.help","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"storage.googleapis.com/order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1754768276874","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.251","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://arrerly.help/","date":"2026-03-02T14:16:34.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:40:54 GMT","end":"Mon, 27 Apr 2026 08:40:53 GMT"},"fingerprint":{"sha1":"FF:AA:A9:10:E7:7E:76:CE:13:4A:A7:E8:E2:99:7A:E7:A2:B8:4B:C5","sha256":"B5:B7:7D:CC:E7:A5:69:5D:06:04:76:8C:37:6C:F0:02:64:27:44:AB:05:51:94:AD:48:DF:BF:74:C7:4B:11:D1"}}},"request":{"raw":"GET /order-ress/order/dotdigital/004a039a5eda4e7c9e00f0fc6434cd65.jpeg?2.2.1754768276874 HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AGQBYWz8LAyCwtXBCq7QssdtSr0hMjUWg5V0q7zsVHA46i8Tul91uXEeWZGnIX-_CUs8FNhdZ1YlhRU\r\nx-goog-generation: 1745019054266672\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 9320\r\nx-goog-hash: crc32c=NRpzvw==, md5=8Rfh7LmmWZKkoSeq5xR/PQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 9320\r\nserver: UploadServer\r\ndate: Mon, 02 Mar 2026 13:58:34 GMT\r\nexpires: Mon, 02 Mar 2026 14:58:34 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 18 Apr 2025 23:30:54 GMT\r\netag: \"f117e1ecb9a65992a4a127aae7147f3d\"\r\ncontent-type: image/jpeg\r\nage: 1080\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 225x225, components 3","md5":"f117e1ecb9a65992a4a127aae7147f3d","sha1":"d31cb59eef02bef662f2a32927486fdb0bba9938","sha256":"c41539a30a96d819192c0088fb339eb265079a33b835550da4d67e239ea658b9","sha512":"82a5726b19387f79608c7ca92ead96d09e0bce5d08ca0c607b93412e5110607926ae426b869bd993a72ad0f586bf82c39099ed02e051fa0a573db3ff1345444a","ssdeep":"192:afKC5CG/uzpL2j2tll1RXLhL2yjT0qLiaOTMNEdiq:ayCEaQLzRbV2cTLLiaOTMdq","tlshash":"90128d85bd31deecfdaec33917d3a316e293e93b26d149a851026b1048d3a3e5217635","first_seen":"2025-04-17T23:40:09.012509Z","last_seen":"2026-04-07T11:52:26.867546Z","times_seen":89,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":78,"dns":231,"connect":7,"send":0,"wait":9,"receive":71,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}