{"report_id":"3a002587-1784-47b1-83ba-2f014ff6cf9e","version":0,"status":"done","tags":[],"date":"2026-07-12T19:10:45Z","url":{"schema":"https","addr":"heotox.com/","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"104.21.14.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"title":"Prediction markets - Heotox","dom":{"size":995435,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41798)","md5":"553e0676951be8688173cc690e1d1cf2","sha1":"68ade56eb3619378b5488da2c026c2bf33176584","sha256":"393b70464d63fe2daf645fe1b32c80b0feb6d84713e7a0e80c94291f813d889e","sha512":"62a62a398ab73c8f5a8aa6ba21f1f164b1552df58c9bf9fb175fd5008378f808265e0218b84c30303f9ed48974b75d3d7b9657cde53e7a7c8c6f05ad9be1ece7","ssdeep":"6144:dyDalGTqDalGTHPLVXBikf5aqaCkxcOHvC64JZ7/7Xg2:gDalGTqDalGTHDVXBiqZ7/7Xg2","tlshash":"6225b53ad0f7cb3a487e3484c45d2f8467dbc35727d623faa09a44586b1166e9d0b8ec","dom_hash":"domhash30c2c785efb2ba4fba3e3b3de12d0c0a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"heotox.com/","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"104.21.14.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:10:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ws-feed.exchange.coinbase.com","ip":{"addr":"172.64.151.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":3077046,"first_seen":"2015-03-11T21:52:18Z","last_seen":"2026-07-10T10:27:02.372527Z","alert_count":0,"request_count":1,"received_data":985,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.exchange.coinbase.com","ip":{"addr":"172.64.151.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":3146427,"first_seen":"2015-01-26T19:35:36Z","last_seen":"2026-07-10T08:45:18.183269Z","alert_count":0,"request_count":2,"received_data":143148,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-07-06T08:45:19.744832Z","alert_count":0,"request_count":1,"received_data":4184,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"polymarket.atlascore-panel.net","ip":{"addr":"104.21.1.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-27","domain_rank":0,"first_seen":"2026-06-28T13:14:33.05351Z","last_seen":"2026-07-10T10:24:38.220114Z","alert_count":0,"request_count":1,"received_data":1045,"sent_data":673,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heotox.com","ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-10T10:27:01.647435Z","last_seen":"2026-07-10T10:27:01.647435Z","alert_count":107,"request_count":107,"received_data":4122503,"sent_data":162602,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-07-09T02:04:55.259999Z","alert_count":0,"request_count":1,"received_data":116672,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":716870,"first_seen":"2022-09-20T12:30:23Z","last_seen":"2026-07-05T23:00:25.005875Z","alert_count":0,"request_count":12,"received_data":625652,"sent_data":7168,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":3331,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heotox.com/build/assets/gradientAvatar-6gze20LW.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"112d2de9654bd6287e6815ffdddfc38b","sha1":"a3b7803173bae4413eafb15a5b6093c7d9660093","sha256":"39cb3565b1198eda0fcb7fa7db6e2563c36b78cfb0cb69ad8677d7b9600e8057","sha512":"f98d54a75b3ac09778f123b7f7af36edc3ad223850cd0a43c760502aeede94699f719462efc808f3d04507d8025ff2638f40a3a50848d3c5ca1c21061bf906d4","ssdeep":"","tlshash":"9701b15a73cd9487772ecb6454630449ac28ec8638076b4c94ad589ede155fde07ee0c","size":779,"data":"","first_seen":"2026-06-28T13:42:54.021019Z","last_seen":"2026-07-12T22:10:39.156032Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/theme-C0Xq8wRk.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e12cbcfb91ec098954995642999b89c8","sha1":"d8179edf17d0dde9f517cc533cb1c44ecc4f5763","sha256":"816e0be1d3c8bb9c39deb9799fcbef84cb31ce29a8971dce3c1a2f0e29cf8024","sha512":"8d0bb3ce78fe0599adcc73b24c4026861ec92edf6c36c0146d99a5c1dc10107e89bb6a52fcb2da4b99bf14fa00be66cadc28d5d0602336a927aeaf6795c0a3a0","ssdeep":"","tlshash":"14217bb93880573d079b04dad0b2df897a38233179496950d28da4583876d9ec223eae","size":1235,"data":"","first_seen":"2026-07-11T14:32:36.298346Z","last_seen":"2026-07-12T22:10:39.128954Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"27cededc46864d476c588924a7e514fd","sha1":"9daa95e9d966ed96d6d2d690b1f0515c4df935ef","sha256":"9436390850c2d9b0a2d0cd3b7b3d93f2f02fb9dd22a6127387d10eb541402302","sha512":"16b94664935229b1bbdc5d744ed15f601f3553c54b490eb831fd4902f61e83b7bae126832b548307f4f2a86aa3d254bd4ab6c3889698edbb6df097f2241c7619","ssdeep":"","tlshash":"e4c08cc8b0c37d002607a41010af34e49024842ab1582b028da4d8483e230b48237e98","size":146,"data":"","first_seen":"2026-07-10T10:24:44.944295Z","last_seen":"2026-07-12T22:10:39.172336Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveQuickChart-DeWpSezv.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f0107a5877892e4ae319b22a7dd3a30","sha1":"a75edbeb4a5567de57dea604452b6fc1752be872","sha256":"a3741c18c47fa0852ef3ce5c6c0beb38e8a4263647f640b6e4e053adac89c1aa","sha512":"20475f5c1d854630d8901942793c5b9e00486c01de38a640761606b0dd1750fb6ea1390d340faf78e53559204d2b60c1aa510deba3366689d92d40283269dd59","ssdeep":"384:HDPhqkUsy6SikOKP2RffkDOZ+ezTihvvVArhypv8pWe:HLgsSLOSOfsDOZ+eHavvVUYe","tlshash":"db621a04f939183b99b304a59277271962a40bd2f46045f083794e743babd6e37b6fec","size":15750,"data":"","first_seen":"2026-07-11T14:32:36.346209Z","last_seen":"2026-07-12T22:10:39.10655Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bdc665a91ce354b6b29e1440c087da1b","sha1":"e2a5463d1f014bc22029584c8aeb0e264b8d3d97","sha256":"4be21bc4b7d50194efc45e563be8018f241e8948620b38a2c86d596e205aebde","sha512":"512afe3cce7434e775517b216f6cd9bada0c4042df8187442824db9fc27105294161070a39f550c6ca7af711269f882ed2bd40488e243b6ed1d928f6e0efbfe2","ssdeep":"","tlshash":"02c08cc4a0c27e101602641020bf28e89024403674481b029d94dc482e720b08237e98","size":139,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-07-12T22:10:39.175046Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b984def8f5eddd8a029978d23bdf3f92","sha1":"54d35d9ad607b87a6a17dd166da1ed19f6ff8862","sha256":"dd8d6655a1a270a0b7e44a62f2ed7695729d0af7fd56ecc7e00dfbea58a5eabc","sha512":"5dabd45619bd4f686ceaa65d30e97cfa6b0fdba9cdaea7cf18a951b2c7bb5d8756a1c43778fbcffb83c91762742f1fc24d1a60602c41e236599d3d076137c20e","ssdeep":"","tlshash":"d8c08cc4a0c22e002602645010af38e490284027b0482b02cc94d8483e220b08233e98","size":138,"data":"","first_seen":"2026-03-03T15:52:08.954339Z","last_seen":"2026-07-12T22:10:39.177539Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fe19903dc0ef3cb6a76d24220925350e","sha1":"164077a2be077ffc40573a84c4ac8af8813cf15e","sha256":"3525d72887bff5a2444dd311067f8d2aa7c43962fda6ed6c94de4ee26eace4af","sha512":"1d3a47ca0205de090596287885b6954c5584897f36a26415f14dd55e14de16443b05c333f5af15f815c07f774ba394fb04dc4fb881de4369259c2015f7e497cf","ssdeep":"","tlshash":"fcc08cc5b0c22d002602641014af34e890244026b4481b028cd4d8482e320b48233e98","size":137,"data":"","first_seen":"2025-09-30T14:09:23.351884Z","last_seen":"2026-07-12T22:10:39.175868Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fa8588960c59012f9d977127d6bf7610","sha1":"daee0b064e23d10213be018d590d9fd9f8e7c03c","sha256":"b51721c30c3553ea0439e1c195eeecbe2eb5a3aa2aea3b450304046540a53645","sha512":"cfdeb93b9010b43722d2d2b1e2e38b7d1d44b689f19e82b1ff81ba497087ad5b8b2f12ca27e8dac65a7603cd8930610bf274447a750c6e56c23601229da8cd64","ssdeep":"","tlshash":"31c08cc4a0c26d001602645014bf25e49024802b70481b129c94d8482e220b08237e98","size":135,"data":"","first_seen":"2023-07-21T21:54:46Z","last_seen":"2026-07-12T22:10:39.184692Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/DepositModal-DX0fUzdD.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68e1e047fc35fcb8cea775b6c59e81e5","sha1":"b069a094ab506bea00321f99c14a07eb4307835c","sha256":"f14db5277549c56dc68a3afd028fea644f93a374c031d156db87aaee49ed1165","sha512":"d498347466a77cd79ed3aae02f249b451d910ad1127a6ba57e4a20a1f7ab83ea7df667e2b30bcf564f15d9512b9b6611de5519e530120bc39cca455e08772dbc","ssdeep":"192:8CwPIo9jpZLew7plWTE22nh6x29RBmxxX8VsbI6NsEDJQeG12+:8FQoTMw+Td2nh6WmxxX8sI6NsWWzH","tlshash":"1012a64abced69348377809260560c2db44a2f95c4265ce7dbfccc621fe5c366a2d939","size":9728,"data":"","first_seen":"2026-07-11T14:32:36.256417Z","last_seen":"2026-07-12T22:10:39.07416Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/format-BsmBJXpJ.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ed58833589507caab001b7033595f33","sha1":"4aba50432af280ac90ff2d5bfb4aa41113885712","sha256":"6f616d9f5396d7e2d7e73a6330a0ae4fe873d19233dd87b320468221de4a352c","sha512":"38f8d81d81dfedad549fb76ca84150b687cc2cc34f1854f082cc8e2ecfa6cd61a8081b533d720b4868192951565d0fa1210c7e08a1be219d15c4993b4a5f65b0","ssdeep":"","tlshash":"8cd02b59f2997231071201a001d78063a40fbc715b5f8fe0b5dc0bc21c6b454c579c65","size":261,"data":"","first_seen":"2026-06-28T13:42:53.955722Z","last_seen":"2026-07-12T22:10:39.071438Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HeaderMenu-2OkNNE8q.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"04af62aa904aaac2087f137db782e1c5","sha1":"a3adabbf1e5767592cc0b41a11bf74741387f9bb","sha256":"bcd2168bb7d2458f4adc0aa7e98d25f857cc1438202f51410ef25abbc6575ac0","sha512":"69f24c36c01305ba097cce53f01f74df563591bbcaf420cbcd64660805dd98a02c8777c48ba6b87536c9c59c44565f2c937f2ffbccec3cdfaf15ee88b2533945","ssdeep":"96:V6iB4NzgTW2Z4ADF/MXKxtAsGAzl/LIaDGgi90S30gi9mieMl8gi9lENXWJl/plq:YiB4StAnAzNGBFUQ5F+v2VLM","tlshash":"95d1a61e6b86b87cc11ba098c305793439691b5de10e6840cbfd8d3862f5d58f7f365a","size":6273,"data":"","first_seen":"2026-07-12T19:10:59.702781Z","last_seen":"2026-07-12T22:10:39.15752Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b27e9219e614582d4232f56675d1d760","sha1":"26062b5a244e0b363f7adbac71e2df8e834ed0b3","sha256":"b50986840a64116dc42fa458341431e541c1cb6aaa9f1512b3d3b96d3933bd9b","sha512":"6597ec8856f13742fec9a10e7b1be58953e2b5121ba7a145779861a566ad80bc32433aafa829d404bf171c998e5b3fd04994da425cfa7519067527c69d3a84da","ssdeep":"","tlshash":"f9c08cc4a0ca6d001606646050af28e49034402a74481b128d94d8482e220b89233e9c","size":142,"data":"","first_seen":"2023-04-16T17:28:55Z","last_seen":"2026-07-12T22:10:39.177048Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkLayout-D2A-GwN6.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b6288f0bfbd6c21adcf9d674c13eee8","sha1":"d51ebae2dbd343bcf186ebc36467cba7cb9caa79","sha256":"3452c48fb51dda3dc59bca6b267781eb18dd75f27c334f0b9adcb24462187c6a","sha512":"2c82cbbe347d899e3f52bcd1304fe2636ac27cbdb338d71301c9ec27258c89b2639d7943156592d1d8bf8ec18ef4a31887741f3e970c278d64cc24868b9f3e01","ssdeep":"96:qHhbuWVGmDjy/PpBBQLY5mejE91pHY3UfLhpVWVX2VxVMuUlDcs4L1W1pD6zdV:kkhBee763VaTlQs4L1W1pD6zdV","tlshash":"9da1b58af55660b605b789e4d28776b9e13d233e6545c1b1e3ef0a382b70d97c06b822","size":4879,"data":"","first_seen":"2026-07-12T19:10:59.63508Z","last_seen":"2026-07-12T22:10:39.087757Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkButton-IwG-YtOS.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"78bb555dbc3530d989f96794b57543cb","sha1":"2d19af1f1d874e610ab99c6e14fa7140980f5fe6","sha256":"76fb02ef61df77032639262855f9445d837bc78375fed7fb03146862ff563142","sha512":"8b1a461a694134d5445d03e2ec52ce19d3c942bc04d33d850108eb90a02a6f66471c35de432dd5b4908b8f65c720af744f5758cdf7fd89213a42ea07024ad653","ssdeep":"","tlshash":"8c01af45b608db750e468399c412a1666b062b796729391687ee03fc1fdb320451ef37","size":849,"data":"","first_seen":"2026-07-11T14:32:36.305089Z","last_seen":"2026-07-12T22:10:39.116247Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useEnabledLocales-CCmqlSZB.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d3d3bc8a6f9084db9dde2d6c8b31697","sha1":"825778457e01d67e774c9ae98defbee2ae643f83","sha256":"53f8317f97bc7008336cd1c7c4a961b874ca3fa4463a500310b2c2f4925f2f67","sha512":"551281ab9dc129a39740926ef2d8cb574454f1c892d4fb6f35ec470040575c5814232259e7ce1a49ea42783b7e5ecd3b64f1b54406976ef5b9e1328b2e29a06b","ssdeep":"","tlshash":"26e0614db4a630f1c35124d0d0bb45b697349908361aedd1b04f09a56d621ddc35bd1f","size":392,"data":"","first_seen":"2026-07-12T19:10:59.671444Z","last_seen":"2026-07-12T22:10:39.110767Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/NotificationBell-DBiTXmPX.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd00116ce2cf1c7386aec215b0b73ab1","sha1":"b344349fc4e6d8cc28a2e9533d6276f4bc2203c0","sha256":"bd0aec51a5d1a7453d6cc1c9f6bf31a3f58d224b9e9cde505b61346baa455837","sha512":"95cf222a9ad7ff8188294ae835bfb1142bdb9d2532c3156871c16f09961bba5ce387cef1445b5cd035a01f79d82d46a9fe9b62a1f93331e05488d6f9f7c591ab","ssdeep":"96:5UsqINE5Jx4GIcBDVM1lAADGNRbAF45VNFmifgMlNTxjwycHYB2pD:is32jpoAAaNRbhVXNfrD9QD","tlshash":"75919748f086167837b22553429b1240f23f2ba5a4a4c48263f64d793abdd57e35fa9c","size":4438,"data":"","first_seen":"2026-07-11T14:32:36.318978Z","last_seen":"2026-07-12T22:10:39.079123Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useCountdown--EKxX590.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"025400d086620dbaf671579ff119e451","sha1":"47028f05699d0a9d2fa75a95a30bb475da793ff3","sha256":"a531bc1fddc8a34fdf31b859b9c440fa65b469240265856600fae087fa775420","sha512":"bf9e11db24362ae28bceb5723ea04883c3ea06f84bcad9291ca574aacc7e2a999a825b85c68de92e2e7be16cfa723df73d54ce06e4ae40623d6f2218e6008e15","ssdeep":"","tlshash":"3601ab54756494a017320cc203671b6a2112ef25748a8ac2526d4ea23a7bd67c2ebb9e","size":836,"data":"","first_seen":"2026-07-11T14:32:36.308529Z","last_seen":"2026-07-12T22:10:39.100266Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d2c46e282d3b1c4fb0e1e5089cb0ad8d","sha1":"6259b8c101998579af41ee5d733736dd31b67955","sha256":"d352ca03ed8336b2c1f1d040b5d526386ce698b0b390c37fd7d7021f93e099e1","sha512":"4958b13b35769d932a046f37169ab01fc3a83cc1a8e699b17a59d33284728ecd656c708afa2e8de563089462965217a4f0372b08a93ea6d0a573edaba505a02e","ssdeep":"","tlshash":"bac08cc8a0c66d101622742011bf24e49025842670481b028cd4e8493e620b08233ed8","size":145,"data":"","first_seen":"2025-07-08T22:53:04.99489Z","last_seen":"2026-07-12T22:10:39.192085Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76a008a19b0a6e9a906f5f09cc458de6","sha1":"e94a21ecadb9ff8e7c02e1c4a8141a2ea9b47a6e","sha256":"ed8d057bdf31b0fe8038d294f52ebc3c994b0a820009c4aa8f48cc15556adc3f","sha512":"cd05c74feae047a2eb998f2a448ea9354945333609ce2959a00c77f83b8acc65f507f4eadc6bfcd41a2f92dc65e1f9c7e7c6924e58088ff5869ad336ccab6848","ssdeep":"","tlshash":"32c08cc8a0c22d001606651010af28e49024402670481b029c94d8482e220b48233e98","size":139,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-12T22:10:39.192549Z","times_seen":1150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"149a973e47766058143feec9d2bbdf11","sha1":"1aa5cc03f614f06878f19b6d4562dce0c5788a6c","sha256":"b53345641ff9a693efa5862c01a8007509c30d0f08f02b2616fba9eb8c4fecc0","sha512":"2e1a14795d58a9b595ded3c37b30c794dba292cbfa608f2065a1ce20e502850cac33fa5d5bf0cd74aa9e52627212f778c6fec0206f1f14670ae1051cb1b6a792","ssdeep":"","tlshash":"09c08cc8a0c22e105602681450af28f890384436754c6b028cd8dc4d2e230b89233e9c","size":146,"data":"","first_seen":"2026-04-06T13:14:58.309766Z","last_seen":"2026-07-12T22:10:39.168307Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkInput-BouVFP5B.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d461a43f026b31c8e7c762d8916d9f7","sha1":"a44f4ca0d310495d96765c8b29eb7543ad5f7837","sha256":"520ae62656a5e2e8610c25c83c08cc9b157c563878b1f04a644f946846ad0533","sha512":"4b95b8be062e36391046124db17e9ad50d38b30f35d85a8518f1d809f119123a73047b30478159464e77e202600e5001737d7c3e96f7c507f91f450a44cdb1e9","ssdeep":"","tlshash":"7431300e40158ab38573ddb9c2a2a400a29c1f9d9e218499b0ff8a083b7dcc4572ff74","size":1699,"data":"","first_seen":"2026-07-11T14:32:36.232998Z","last_seen":"2026-07-12T22:10:39.08348Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/livePrices-DCrIK8eH.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"064dd85b4c1d72cdbc0ea9a904c94511","sha1":"4da1bf13850e30959c7146770048ec15cd379da3","sha256":"232c4a6f67b6e91bcf8045bbe0e2452765dee5e984f0e5c3636a1ebe83b8f2c7","sha512":"34bd4fe1971213bfac2ce33d38d404fda77b65460c9dff7d6036181e8e5ce025aa4df1e61842a290273043e3f2c9b18caf0836927eb0aa8ce5afcbb74e61bb51","ssdeep":"","tlshash":"e1110e983490b85043a0a99a837b52157051267276a8c1e161bf19aabd3a23fd937f2f","size":1004,"data":"","first_seen":"2026-07-11T14:32:36.344079Z","last_seen":"2026-07-12T22:10:39.109591Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/liveBalance-IF-5Ff7C.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e78eb5453dcdd7384925965292e246","sha1":"7bb1e10b7e524fb975bf3ca16c177176806d1f83","sha256":"181e14d3ce3967a2bf74288942576945fcb878d640f6e9cb5e48755b7870e970","sha512":"4b9a0c75f8f96786b182f4754bdaee4232ff6a88317a7d987bf84c582967f2894a459081b7c3659bc5334950192f00a6646b15459e05a42903f496b43985a70b","ssdeep":"","tlshash":"393110dda978647252f95453525a7303342dbb3fd44a419a410b2f2867fa803b2b7f4c","size":1656,"data":"","first_seen":"2026-07-11T14:32:36.334073Z","last_seen":"2026-07-12T22:10:39.111825Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b7d952fcf52762873474ce8192e7bd60","sha1":"a13179f906c43cae37c5944dd5c671d768e2c1f4","sha256":"2fb703136f0fba53ae312b7837242f5fc6985e728404cbfdbae77ec615d48b89","sha512":"38fbf60f2db601aaa675aa84ec4703cbfec671d1529aca7b9a121732b2bf9e205f087c62ddd7475284e5fa57cc9e85149f77883a619ffc953754ad08d9fb234d","ssdeep":"","tlshash":"74c08cc8a0c22d101602a41022af26e4a034442b70485b528c94d8582e220b08233e9c","size":139,"data":"","first_seen":"2023-05-23T01:00:35Z","last_seen":"2026-07-12T22:10:39.176573Z","times_seen":942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"98c174dafd2cffbd2de51c4f9c918ed0","sha1":"f7766ea236337caaab0f5b584a01acb271f23045","sha256":"c953ac3178dc30449cb54673970a93d1ea9e86a79ccf9747ed1acbdaf13dd667","sha512":"56ab625015f6ffdce88d3e4d8517421730687b44d31fa89f96f1cb4cf8c916f385cf4dc3ea6dfb3bf43d9a7330484570ebad74d65db695e6805355d18fa2f327","ssdeep":"","tlshash":"25c08cc9a0c62d001612781020af24e49024402670481b028d94e8482e230b48233e98","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-13T05:48:54.194239Z","times_seen":792,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3298c849c714853d29d5a14eb41e97e7","sha1":"41946e2e5a531f67c15a598ddaf580bce20c9c60","sha256":"6daafe73d21539ac886a91eb10b047e27b704fd4397cd3b5e13aea93dc99bd4c","sha512":"3f814918150ad64703c08dac4d9bc4ca3a40346d4214b9a4a1d36c6dedb9110ca6306d5958e574d37bf544a6ee66620cbd05d939e8e8b7b5c1b911ec02969bb3","ssdeep":"","tlshash":"45c08cc4a0c22d001602a41028af25e4a024802774485b129c94d8483e220b08233ee8","size":137,"data":"","first_seen":"2026-04-14T07:48:34.551191Z","last_seen":"2026-07-12T22:10:39.180515Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a123dc28f4e22219acc9172277042466","sha1":"aefd462c031e25445a81169858601bd35267b6a5","sha256":"d6a75324d79bb6cb28a118db6313bb94277f39e686ce8858541543c02f84c988","sha512":"a1434e8ac7a184307c9cc1a90dd08cbf1fdad5b2e27be1af8761fbfd17b814bbd1131b33db063d379552fbee3d45b8dcd05d4cecbdbbc0dc708b87242d9a666b","ssdeep":"","tlshash":"8fc08cc4a0c26d105602641014af24e49024402670481b428cd4d8482e620b08233e98","size":136,"data":"","first_seen":"2023-07-14T18:50:50Z","last_seen":"2026-07-12T22:10:39.186378Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1772a4f903cd4ea5b726ceac262f117e","sha1":"4ffcd8b20a20020974f236f8b3d3e90d45367239","sha256":"5ae3223aae2623416baca28f90ff9a643cb597b8c20348c59295d08c76a20736","sha512":"e5a8178e41bfe34aced77d6cd971f89e757190c8397b3b25050a4132292450cdff77670b2ccb8f4182fbf03ef1b8f2fa598bc36a987b31e5397c572cf00fc527","ssdeep":"","tlshash":"64c08cc4a0d63d022a82e41491bf38e4a024842674881b429dd8dc882e630f08237e98","size":149,"data":"","first_seen":"2026-06-28T13:42:54.065526Z","last_seen":"2026-07-12T22:10:39.190846Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileSearchOverlay-BR-EcC5J.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47998ab091c823f4d4cd6250ca568ac4","sha1":"1b27b6530cd08b2b052925b41ecc54f5b79defc2","sha256":"0f71fcf98c049c7094ac650cf91d13a3ff93ed00b557dd53bf6cd2cf03f1ad08","sha512":"ee7bc5cb5fabaf2e474685410c637182b613f30d451aa0648082452b23d811ed9fe1ea5a62cc58afbcb1067b4d811c4d60a9b07da46c5e93bc2a9ee8c56aa829","ssdeep":"96:5FiObLVZYtf7iGi0wKndJFRnH5sAI4oAuz0xcRn50sEbdTTrxn:5FiObLYtf7iDRKnzFjy4onz0hrxn","tlshash":"8c91a63dbd079ebd42b742c5d01aa028381c1fdac046246191fd9d7826a9c37e76af9b","size":4222,"data":"","first_seen":"2026-07-11T14:32:36.336086Z","last_seen":"2026-07-12T22:10:39.140991Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useBrand-7iKP2T9i.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6706b0adfdf13f911a350783a72807de","sha1":"8675ce4dbbf70395f1527383cd09116581681c10","sha256":"6da09e66d4748843caa98c15ebc53bfa0de93ed8a1b760fa1102e468383ab5bd","sha512":"e7cd67fc26ebdcda1eb7d76943eeffb40332d97a741bad8f2de6003f95a68bf21ed651ab2c899c2b6c860c00a33a416c29547b0b1c6694cad6acf4861a50d76b","ssdeep":"","tlshash":"a9f0550a62c63074079a30a451e31480430aab237143aeeae0678f030da1902c4fbf3e","size":448,"data":"","first_seen":"2026-07-11T14:32:36.331152Z","last_seen":"2026-07-12T22:10:39.085524Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6c4b63197790d25a07f25a43bd99b082","sha1":"9cf651883e08001a9ec271a0c3c2d4ba8cbfda2d","sha256":"cab5094ca7bb9e74a1d0753500ab633f54ee468f574b0c71293e95e0eeb863b6","sha512":"019ba7e344e3b8e2fb0b9b422fc54931b8f5650f519c8532a13b38b604c7761110390b28f6531300602e1e130ef426834d9ce94baa0654db26da7edfbba9b19e","ssdeep":"","tlshash":"5dc08cc4a0c23d101a02641020ef24e8a024806a70881b028c94d8482e230f08233ed8","size":140,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-07-13T08:26:44.002609Z","times_seen":779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-12T22:10:39.187963Z","times_seen":1515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0ed7511cd3b7281935b501081af2b243","sha1":"7ce7c1685cb501be190aabcf6be8dd99cfbf124e","sha256":"4247c7e1fc2e29b0428ce5ddb331bde55d7a2240cdfe739e78d856349a36e99b","sha512":"792f1b064e558413e24df0cdf3b12c29725a76345b048c7b3ee9b3745d708b482d7b4fefd118be667b4a4a8a6976784b63847f7f225d44b9045c73cbc8bd2ca1","ssdeep":"","tlshash":"9bc08cc4a0c63d002603655110af24e4a0244026704c1b22add4e8483e230b08233e9c","size":141,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-07-12T22:10:39.183592Z","times_seen":396,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86eb7d1035357be0aa44523f299b98f3","sha1":"c1b29fe200daeafc1d1d1339b036abaef1b8ff9a","sha256":"26356e4e60562c77e63cd310c17f9985927252e5b3054a071e4241aa573bc5d2","sha512":"693591fe79c329dcc9244e177059c378e7a3d4cd168fb23651a8bd057eaffd1b5ef6225fa61374248696b4699eed941a1abe0d37abe970686daa576f0d41bc3e","ssdeep":"","tlshash":"01e0177812e4280750333578228b0ad83839642366359905beac866c9fd697a86a1ac9","size":375,"data":"","first_seen":"2026-06-07T20:05:07.683818Z","last_seen":"2026-07-13T06:06:47.368435Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"83f14882cb4d80be6d0c06eff6e64372","sha1":"dd8b8a4cad9117caa8a785716f90c9b53f48d303","sha256":"cdcfdb8c77fc2b5de68a47d853f06dae9ca5ac5884da34794ecfa856d0e7a686","sha512":"585119f8a1000c68b8a8a26cd67ada114764b4b11465ce85e2c1fc5050e2e686af69b631ee45f50906f901a341d63d5e610274d4f3867ae1cc5d8a22f111cab1","ssdeep":"","tlshash":"6221d07c0e9a333a5e6b50df8baeea903b10a0374257d261764d83456f50ff8005bae6","size":1349,"data":"","first_seen":"2026-06-28T13:42:54.082164Z","last_seen":"2026-07-12T22:10:39.165068Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-vue-BaKSsOLw.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a7c863fa51d4b4d455c688bc9410829","sha1":"e4a83c57099bb40d813a149a538fa052971f58f4","sha256":"b71b0175d6b227160504790a640ccea52caf0d6c9077d83cd5b39b76b7b0ebd8","sha512":"262b43a3adbd8c9ed616616a223c1028d031c7005d749cce0da41b800238a64dbe27a01b098557efdc300db6947a47f3d235686f3287b71f3129aad590ca5ef9","ssdeep":"3072:IvdhkF6zk5lS7IM1W3XENjJKNlaM2TxRP/F/QCmdRDG4RuX:HFkRJ/M2TxBWC6DVg","tlshash":"def32ae432d6b07247e604e650774602f3692919384ed4e8b66dbcef3a62c0291b7f7d","size":165316,"data":"","first_seen":"2026-07-11T14:32:36.297367Z","last_seen":"2026-07-12T22:10:39.144459Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UpDownSlider-C3Zi_zXN.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a92843569202c8eaf785f6beb00f6340","sha1":"0c5b1fc9da40e2efd30841f61ad2083ca361827d","sha256":"14f5803dd1c84749e728dd8908c3203f2ebef37f93d95f5916e35d9387172532","sha512":"5e167c6c3d9b0594d0a7faa665e2b1b8b353b8c0bc3e080d96f7e4a10ae9dc990a52f954e235a7e775c99843c11f74e36dc7c28da45d1c479c511898639bd71b","ssdeep":"192:Jb24bk9mTqvF1DXwj5Ecs+IgkYFmw/VbHQu+d93f:JulXwj5Ns+Igbmwi9v","tlshash":"13d16608f22a4a3f93f3004ad092485164172f63651488a5c0fb6d7e3faed26bbdd66d","size":6526,"data":"","first_seen":"2026-07-11T14:32:36.317146Z","last_seen":"2026-07-12T22:10:39.146722Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-realtime-DINYGnMF.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbb739bd2cbb7a27482142e46c2800bc","sha1":"96e93f3dc7010d657bfcdb5c2a3daa990781cd3c","sha256":"93a411fbc7c1eced84ca717a13aae4cfb00220895437d85695baf93928d2d0c9","sha512":"9e50389135e9b74b59ab186968d96d3ebc4ecb6fa47f9c73a7606077af65197566a79991f5d3b946e457b9717d031d6af73f8ee715f488d943d32eb92c910756","ssdeep":"1536:XZSss6ffsitHFQwsepb4UsTznO2fR5ocbZHqPyY+shqn1/Qyxnn:G6qIMnO2fR5ocbZHpBshqn1lxnn","tlshash":"3783c7c4f592e02647e7b1a19c665203e2382aa46109c03c7b7cdee6ec756c9e237f75","size":86986,"data":"","first_seen":"2026-07-11T14:32:36.259155Z","last_seen":"2026-07-12T22:10:39.104779Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-Bensp44_.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9918650b3043666dc16788c48e73bb3e","sha1":"dd913577665982310fd137c3d7acbc7447fc7455","sha256":"9e6b4bb6192c3a40bff0606a4ec69253da192b07f243687dddcded30bdfd4e9e","sha512":"097e256bf032ba8e17ce851542ae89d5affc9489f33ecabe2a2a6130820502069bc71e0908b9e6e1edcae402d99c616048791f8f8ad138f4cfc00298871b3c53","ssdeep":"24576:af+FUMFUfLnTByNnALB8Vyqkqik/QQ+QS0ze1OGz+bm7:aWFUMFUfLnTByNnALB8Vbkqik/QQ+QSN","tlshash":"d90539d472ca707657ea45d9507b0500f23e9a58b40d8098f26cddfb3ea6941a2bbf3c","size":841099,"data":"","first_seen":"2026-07-11T14:32:36.311651Z","last_seen":"2026-07-12T22:10:39.086636Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SearchDropdown-pd5yFy_4.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afdfebfb404857f7350a33fd6296b656","sha1":"2d4063f9ae77a3e4b00489eb4eeda4fff51f679f","sha256":"863ae611791a7630ce05eed876282dcdc32b6ecbd091696fb80c4f144d5b4112","sha512":"965b6542d951169b231232cdd9dd11178dad914fca286bf4b84f088aaf79fd34e7c3f07c0a3bf3ccc00beebfe36310282d484ff84d4a78570c50768431b20b66","ssdeep":"","tlshash":"d151c66ca043ecbe42b39241e009b0a479692f62f98646d653fecc352359c39bd39f84","size":3062,"data":"","first_seen":"2026-07-11T14:32:36.299366Z","last_seen":"2026-07-12T22:10:39.120983Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileBottomNav-BQzi_t2B.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5491f0b555f9e4e7999003db5d4a87b8","sha1":"8c920781cb87740051895d8fdf8524581a64c8ff","sha256":"e5c68a0a66a49df45d61d5cd3dd727e826119d57ff4bc515bb3a9ea09f3df629","sha512":"761aa9059fe5fbbeaff7252334fba3397402ba245976a21f25721b4f582261a087ad72fba306511220b49a5684ecbfdf1f9c04011a561601b90a35cf46b32e22","ssdeep":"","tlshash":"29516706391d46bd5123c1e7c7167b52325d33d7b608144a87ee40302a7ef5bf63a9d9","size":2683,"data":"","first_seen":"2026-07-11T14:32:36.345224Z","last_seen":"2026-07-12T22:10:39.112606Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59f3747ffcbbf396a40008b5df52403f","sha1":"020115284084741e3fc6de2173e0dcaba2b754a1","sha256":"0d433dab1fb556826f59cadaa864946b983059d17480490c02098241cfa5a833","sha512":"d1eff9e5f41576ebbea4d2ed1fbe7afb2d5b9c05a6095bdc1598e69d387ca96954c0c2408052ca97780f77a8c05a708171e2f8f5061e2da9a8a869aed74ebe99","ssdeep":"","tlshash":"7dc08cc8a0d73e002612642621bf36e49034902b70881b038c9cd9c82f625b09233ee8","size":160,"data":"","first_seen":"2026-07-10T10:24:44.974804Z","last_seen":"2026-07-12T22:10:39.172892Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveActivityFeed-XHp5su5e.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dea9a7215a030762c29f413a42f9a683","sha1":"ce819c5c19153856cb655dd3bdf8a5482e892de9","sha256":"9f57a127dace8a251e4c82ee00b81a5336c76103649b9a74d9e4f3d162c1a47e","sha512":"f2daf19363ab712a64079ce54c1d11038aa9420db20ff2f6b3b24bb4d6b8cfcf4e7bc2ba5449a7d25fbf50bdff9147efc3b313b2fdbc9ab9b181cef27e51014e","ssdeep":"","tlshash":"6d41b2887b0ddcb902e3a012d4ed70d00018bad6a6d80605d1fbc8063f32934e20ee7a","size":2142,"data":"","first_seen":"2026-07-11T14:32:36.285756Z","last_seen":"2026-07-12T22:10:39.158883Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-i18n-BpxRKoiJ.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef4d6495f9e78aa5b9d8fd44fa9bfb7","sha1":"1ed6afbe46f11bf1b9731063dbf18974b02724f2","sha256":"4aceb2dff293515958993acb29817819a3f41de1e9930dc2286e887db88e5601","sha512":"e833154da89885f0b3ea9d19bdac5ea5e6e4d69064bc2c0ec1ce06317e8699b62bb2f4042707ca589d5941ab8a9d8e8a62c1f0a59dff2f9192103bd664faa0e6","ssdeep":"1536:ym7n1NNBdTXweFd4ocySRcJPzASjmguov+C7Uez:PnvNvTwcd4ocySRcJ7ASjmgu4wez","tlshash":"9653f7c971d77056877a46e960b3004abb3d2a94740dd894e0adea8b3e33c5943f7f58","size":63427,"data":"","first_seen":"2026-07-11T14:32:36.323604Z","last_seen":"2026-07-12T22:10:39.155138Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkHeader-Dy26ziMz.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f4ef3bb137e669d4eed90bf9df047ff","sha1":"4a10ba3beda0701524745ce17f8806dc644d91e9","sha256":"e3a1599ec6c52e0f4715a3a5f50e3bb2f7df9998bf14c8f6494ccbd191a3c986","sha512":"a9f856fba867b49202edcbecf2cc50bded6a625a3cf3824f3cd0be4a9415ba1a7740953db11830ff0d6a6d281e000692a884c04c6805bc6db9f1c2983f8e1929","ssdeep":"96:A2+/5KC9g4BBRbYubZc5BEQnNnZyxNiX9rnY:Q5THBLUubcJNuNYpnY","tlshash":"7991c65eda06857d903b88fad38b7c18296d13abb34906508afe1e3531f8dfbd221581","size":4292,"data":"","first_seen":"2026-07-12T19:10:59.590863Z","last_seen":"2026-07-12T22:10:39.078111Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SeoMeta.vue_vue_type_script_setup_true_lang-dMsMHD_T.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e806d2aaca818e28ef96e16e9dbff884","sha1":"633f4c45b991870c323b6cad4dc791b8172c3751","sha256":"8a20462ad582f085b217adca7b87efc68ad918b4246b13fff4eeced94b906159","sha512":"a735877a063ddc1d9fc6a4a7a08ac3d6cec21cd064dc9ce871896d34f7e87c73a097bc3a074f9330a5ad51e0a84ceee42d98921b11d31d2097952f3b416b9939","ssdeep":"","tlshash":"a211001dbe04f4b457ff82806e7694a9823487229074c89259c78d5a2fe0ff3c8b3718","size":907,"data":"","first_seen":"2026-07-11T14:32:36.334985Z","last_seen":"2026-07-12T22:10:39.129779Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkCheckbox-CYO9qhcT.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a248be8d50f2e69bcc9c998a02a964e","sha1":"8aef6d7c1f08fed809107d069b692c843af34ed4","sha256":"320fc7486e2331418f61fe80fc1aaa0562ae66384cb21e37572fa647205e095e","sha512":"92248892c8321b581a9af1da581123ef314e4e0a58805fa65a3a9d388bcb3111ebdd2ba672b01ca8ed326c8626351ff84c76fbf225616b544bdd819254a6362c","ssdeep":"","tlshash":"7821a50fad58f5b885572866c2177815623c2b8e9a0404748fec96383b2dad2dc17624","size":1340,"data":"","first_seen":"2026-07-11T14:32:36.312609Z","last_seen":"2026-07-12T22:10:39.072426Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-charts-BqNOPzd1.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d64065a3b6a025dc18d2fdcf5e7e0758","sha1":"e875f5f8a2f4e67852285658ab6a54a08241b3ce","sha256":"e6499658c769700369ce1fd94480912a57120ac7662266627e073fa844486caf","sha512":"8411c763cb8d3b9f9a96d513fee6629d9559656b425af4ea0199d2535c35550dc426320708a1488e70fa4d8c3a8399abfa7b7d868aea67cdbd44a33141f68703","ssdeep":"6144:qAi7R/BEaFcnmh6IYB1HDctKHcgc6pKgXA75i0vx3sN4ZvqWnWFOve+4PujwSNDG:MZEainmh6IYB1HDctdgc6pKgXA7w0psT","tlshash":"a064f7d57396b06243e196ea18360002f3257984394788acf5bc5cdb3d6a94a72fff78","size":326310,"data":"","first_seen":"2026-07-11T14:32:36.340942Z","last_seen":"2026-07-12T22:10:39.113609Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-clarity-ghQi_28l.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b266508591b9712ed1b9d015e22f8cba","sha1":"6129961b31390b0c639b24acc1f830c58f584c6d","sha256":"91dd8434116ba89c523dd3c7f27d4364a11b466783613add9e254480400eddf9","sha512":"e3f9e955250e0cbb4544c7a6100ac340a382089277bd6d4b1d923f16e396e9f4a0645ab024fa318dc46ab983d98a65752fa12507f37ac63bc932c672d2dbd3c8","ssdeep":"","tlshash":"bd01707a384364f635b622b63373b608303b5375650dca5093e10b55b529e83c66aaec","size":718,"data":"","first_seen":"2026-03-24T00:35:18.770757Z","last_seen":"2026-07-12T22:10:39.098619Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9609801cbe5ba1eb7c602e003b2bdc0b","sha1":"f408ad51df8160fdfac34c6df99467a4e853f7c0","sha256":"29f360253ef9b370afd391a99bd26b4b45cb535716660bcd728c9a281c366a74","sha512":"b5507bb9068b585f078dc05f2967ebf7e95160e3c686ec2baad8aaa83dfe71be80aaa08aec25e14792cc7a3ed46357e6c0616d4af54cb5d9b014d7fa71053019","ssdeep":"","tlshash":"f6c08cc8b0d63d405602681021af24e49024402670482b039c94ec482e224b4a233e9c","size":144,"data":"","first_seen":"2026-07-10T10:24:44.948737Z","last_seen":"2026-07-12T22:10:39.171518Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketCard-HscHskKU.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4714c2fb565ac7c09859b702c9be02eb","sha1":"715ccbedc2e530c94f64a3515eb2dc84f9a93706","sha256":"5055f745fd7642fca70f5101c49e3426303fd9b9ae1a0ed224548da31bb4edf7","sha512":"9f389ba1f5079e5530488ae2e3c21c2590181a34de5b9e3b8cf56824b28e3dedf2d41b6254a2566b8e1e9d32b6f56070af5aa985fa7bf9a3d0dcce229deb8222","ssdeep":"192:PWHDroDvwfInC2Gh/qibenKxXsEoEfIqC4NY33YRqcc4Ah+K3BGN3Rf42:SDrIwfInCN/qiben+88gqhNY3Sqcc4A8","tlshash":"5f029405bc1fce3993b61f17809822c8386a6fc4935b52e7d1f94c687a71e25286ed3d","size":8899,"data":"","first_seen":"2026-07-11T14:32:36.31624Z","last_seen":"2026-07-12T22:10:39.094318Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useEventSearch-DN3p4Hwm.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a255f2f97e95b2451abe932280306248","sha1":"97f3262c06bed3ac6d4aebd0f319ead0db3f9214","sha256":"a8e78332c092eb4208b6f90aee2669deaaf87e610e779cb7ddb3d74c26b76cf7","sha512":"4810deb0f0b3e59f69acd2b3f0d787e77d6a2762df422d03b0d3925bd0ecd1d7184bf8e3af74f9290fa6551b45bd546ef5be1d88672b3b6f9eda6b1802a9c1cd","ssdeep":"","tlshash":"242111a870c7b2a043f01ce98262e888a26907443495c4d0a06e5d86267ed7aaf03e69","size":1160,"data":"","first_seen":"2026-07-11T14:32:36.303718Z","last_seen":"2026-07-12T22:10:39.128458Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e350c929037d2cc201ccfe6c8aaaee98","sha1":"dbb8ed2980c81991ba55f756e5cb5e66cae3e6c0","sha256":"bf8e2fc247cdd41ba0dffe0eb7de4dce3483caa7ec096cfca2394827282be103","sha512":"2aba61e6bd77ec0b19e3bc28cbe78dcde786b686481f8d62705f9f093a17436ee321af7c15980203e4c9738d2073452df9c638251e883d6d943abe812fc245f8","ssdeep":"","tlshash":"fcc08cc8b0c33d202607662819bf39e89034802670881b03cd94d8492e220b08233ea8","size":151,"data":"","first_seen":"2026-06-28T13:42:54.040693Z","last_seen":"2026-07-12T22:10:39.188504Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9e9ace8692eafd16549e034d59ea96b7","sha1":"74a579876058eaa217d34528542261974aa85503","sha256":"81a94099da39c12b7676de77fc1fa6c59c5a5f6628372b66bf819f74cabb0e1a","sha512":"000f27555ce91ee86a5fd00c113d531abb9d2245da191ece1ebd65ccc91f70c075ef7b3cc8a6cf4b6cdc19d18867089dc77cce9e5c65f776de982b83f9b8eaa6","ssdeep":"","tlshash":"83d0a7e4a0a36c1012055330b46f2ee450254026648415469dd9f4546a630b1c37ff54","size":221,"data":"","first_seen":"2026-06-28T13:42:54.053849Z","last_seen":"2026-07-12T22:10:39.161347Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cada8fb3cc65a39eb36a4df1c90f2caf","sha1":"609ae148c4c2d63e321211f8091ec3f8e0350de9","sha256":"889322541533390498d984110d2c5183e30f68eadbdd3e26d49ff14ddcf0da68","sha512":"9b2cf6f4c703f718d9cef1fa878443517aee40771676b60ef560bfc74e96b94578c7ba9b07041d2716ce040a4c8d786ee32e31f881b9d80443d9a0671f86fa79","ssdeep":"","tlshash":"88c08cc4a0c32e001612646410af28e49034402674481b02dc94d8482e620b49237e98","size":138,"data":"","first_seen":"2023-05-02T22:44:01Z","last_seen":"2026-07-13T08:37:04.003398Z","times_seen":590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1a71992e23c70cdec6a59d65a501d181","sha1":"71546b738a6fd0d5e4f86519c80e8f6faf1137a1","sha256":"a890487083f8ca0ce20c84cc00ff11b7a954dfa643e820615707423b680ad2b6","sha512":"e06377f2c590c6da070e482b92106c6ed392224b9adff016337690bad990b62ff0e629a2cb0327ae068e30dad7b26293c842154057aa026cd05ab5fd5e44c41b","ssdeep":"","tlshash":"97c08cc4a0c23e042612a51010af24e49028402ab0482b028c94dc482e225b08233e98","size":142,"data":"","first_seen":"2024-09-19T20:52:33.389583Z","last_seen":"2026-07-12T22:10:39.179143Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dd127f48419b00e294934562b087161a","sha1":"563aabb8d7a50237359c977877d6b473f4e01d5d","sha256":"c8501d1bad03cbcebc776a30c042e64419bf40bff58390c88a4c2fa9a90fbc28","sha512":"2dd1970ba5d668b929a0ee9fb6290ed04afb8e1bfa75a5760051572155fbc8d6bb5017ecd0ea965f0a37d57a62f9c9bb349aecf9dc330b68744d23ad5ae916a5","ssdeep":"","tlshash":"88c08cd5a0d66e001606a81010af28e89024402ab4485b028d94d8482e230b08233e98","size":140,"data":"","first_seen":"2025-11-23T16:18:14.340297Z","last_seen":"2026-07-12T22:10:39.164104Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f196eefe75d629dd7c6336aebf7b1176","sha1":"f6c9eb52e1b399908dae6193c5f5bbae5b51e6e0","sha256":"6c2e122943ee1d547987a2235c552782f40ea5b36db6225d0c357a9f04b118fb","sha512":"b7923edb3dfc90d1a1537c452145e4179ebde2f51ba9101d8c095b03d5e9f8d1c59e6c85cb53eb7565717021bd2a36e129834f65e7b9a4f03c904319a3e7da3c","ssdeep":"","tlshash":"94c080c8a0d22d4026069455747f35f8e0344197704837139dd4dc583d534f05233e9c","size":164,"data":"","first_seen":"2026-06-28T13:42:54.046041Z","last_seen":"2026-07-12T22:10:39.159666Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkModal-Cajmz3Kk.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"216fac95b98ed13c0806c3f8241a743a","sha1":"dfe07aaa15762f44a7df6df02a921314fd784d2b","sha256":"27cffdf98c8fb408907898d5145727d1916d6794a6b650d50b02c79192080c0c","sha512":"48080608d31f8410790f0dede744aa847a9a2049904bbbf23ae6edd1219f76e26787511273bc8911fd7b4738c7dee63ed99f32a21b2ce1720f95f8c5d32d308b","ssdeep":"","tlshash":"8f41a46dbdadce350047c517f01bad2423582faea9b91c01a5fe15382f39cd8811ab66","size":2200,"data":"","first_seen":"2026-07-11T14:32:36.277384Z","last_seen":"2026-07-12T22:10:39.148796Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HowItWorksModal-BBfGyObK.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8eadb54db2c6fb64d04c341cf23d2b1","sha1":"6f8a736bf5c38abc58553b03ceb56db1e41900a4","sha256":"8d54f8f7a7b593056007f97b7ee596761979a911ae5b727d8a4d539e05b00954","sha512":"c4d664f817e75eb65612d60bf5d276fec0dd6431284534238953438bf406135c85a77cf631a863e38e6a019150e1cdf33b7f67dbd833235fbd360895778588ed","ssdeep":"","tlshash":"4c61950e75ad8e7eb23f10d8f41f2a14251c3b54d804deaa91ed4730066eee1862ab25","size":3242,"data":"","first_seen":"2026-07-11T14:32:36.274107Z","last_seen":"2026-07-12T22:10:39.149587Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"dd3c2f2feb6e3c11a71fbb2a35f57838","sha1":"1dc4e142ee87a95520438d1a953fcde42dd3b930","sha256":"49914a2c47f8e0a87ccd0a449fdade04390d396627545d0535fee630cda7f61b","sha512":"2606d32eda3f5f2e4de595781b0283fa2b8a9744023ad98ac0884f0760de4ecd08b2f2610ddb151031569b033de591d1d6fc9c8c777231d3bc6bf3cfb9f59e34","ssdeep":"","tlshash":"5fc080d5e0d63f201e26691054ff74f451244026745d1f428c94dc552f625f0c137da8","size":173,"data":"","first_seen":"2026-06-28T13:42:54.05951Z","last_seen":"2026-07-12T22:10:39.184193Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e3d1a4d3abada2e8d2c75e6e5642ceed","sha1":"35b82e229ab125500785a1f56d0f43bdf87d0789","sha256":"96c1333567f4157b9f535de1b9cbba6933c0d3f9f193fb3b86a512ad0300cf46","sha512":"8f2cb55a18dea383bd4572b18368dfc8c4d8a9d0155c766b3ce91f7412840be4253a00ad11844cfc24507e940ed845b8f615300b577ee66b375f6aaa68e3dccc","ssdeep":"","tlshash":"22c08cc4b0c22d001602b55414af24e49038802670485b128d94d84c2e220b08237e98","size":141,"data":"","first_seen":"2023-12-27T11:05:40Z","last_seen":"2026-07-12T22:10:39.168904Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e0b67e4c746189d4976514ef80735fb0","sha1":"98e47e1f0e2c317dd4e7da64e333ea81412490f7","sha256":"c0ffc789721d9309b8ecdcc8ee3221ee0a2283086a68b016c95b190b3464018d","sha512":"9b6371345b98b5bf3788a7a20e85a13e03fdac4d8a24ad5bd1e579771990653efae21a68aae3b3e914026cfab8e8b006aeef20a575e64bf866a8890e72b2a529","ssdeep":"","tlshash":"71d0a7e4a0a76c0062155730b05f2ae8502540267584151a4de9f49469630b0c33ff98","size":218,"data":"","first_seen":"2026-06-28T13:42:54.093876Z","last_seen":"2026-07-12T22:10:39.180967Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb16cf539fc19e8fdff774629a2c47d6","sha1":"c21848949ab8ae8b468b401db58517eb1d341616","sha256":"1421dfd9a6cb9e6792c2ed66c2ea6468849bf839c321b4a1ed48892830ac19ec","sha512":"8732424a4e527da65a9e4aa9ffbbfabf78a6e488b4d7b042e788547ab91ff339036fd6fff4864b9beb21412add0594e427386191569d4fac8fd1d70729b024e7","ssdeep":"","tlshash":"64c08cc4a0c22d101602642016af24e490244026704c1b428c94d8583e220b08233e98","size":137,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-07-12T22:10:39.185211Z","times_seen":874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0345d9aeee8fa52af20eac25d031fc8f","sha1":"3e5fdac9ea56c0f6df1baf6fa614c98d5e29bfb7","sha256":"e7a301594a208f95bd5a180dd28dedaf4416ed31adbb3eb11a043c9722927594","sha512":"898b18b5be7413c0db0ad7158ba2b9f8cb1af5037b458de1f67c49dea9fb05c462c841a20a3b4925bee51e970c81c9a51ed9dd49b787a5f837b8d310b397bd95","ssdeep":"","tlshash":"f4c08cc4a0c22e001602b9942aaf25e490348027b4485b428cd4d8483e630b08233ed8","size":145,"data":"","first_seen":"2026-06-28T13:42:54.049068Z","last_seen":"2026-07-12T22:10:39.166479Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a806424a4b49d90628c825dd310553de","sha1":"2e110c959101704bbd0efe9cd28241fddae0c4bc","sha256":"71f024fad34af7e239b2c969ff12a724223f09304977c4b3730461dbc5ac18cb","sha512":"ad10202f0bf54ceec4d268754bad55c2906c72bcb870a9242eaec99ea30508cae984c0c90ac9899f0791b5113381d1dd39f2055369ac0a683e89fbecbffebfaf","ssdeep":"","tlshash":"d0c08cc4a0d26d001602651020af24e49024402674482b028c94ec482e220b08233e9c","size":137,"data":"","first_seen":"2026-07-10T10:24:44.943309Z","last_seen":"2026-07-12T22:10:39.170707Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"53827b8234a78e76533941bacedc2336","sha1":"e2abaf858a33009b983ee50a58311efea772adf5","sha256":"76fcf85066ea1322e6057c4ce02c598d6d9139e027de37b74c865d0c11cb033d","sha512":"a964c269307d2c655154a7b699e5f251e7efabfe7d80f5cc51317c117b99bb03f15baec6204a4b5eb50a22637774a2a52399d6ab911239d8c2b5c78043f75dd0","ssdeep":"","tlshash":"71c08cc4b0c62e101602741010bf28e49034402674481b428cd4d8482e220b08233e98","size":140,"data":"","first_seen":"2026-07-10T10:24:44.965246Z","last_seen":"2026-07-12T22:10:39.178338Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UserBlock-eXuExVEg.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40761033bbf3ee0c8ead88c5580ad89f","sha1":"2b8279cc1e92b1aa67f09f220477588cf02a1e7c","sha256":"c837f180ba0c3106839b36e41059fd8d9343636358ec1ef2a97d6e8374481263","sha512":"53ac15870bb31c09dfcdc21c556a59df856136fd43abe36e94dc8fc9ebfb87655b19508b39463e5f69593d7d5b51293ca93b4e7eda7bf95cbb6dc222701c5f90","ssdeep":"","tlshash":"596182aff505827d12222894d0174c5434ea1b7ddbb43c81d2fe0c396bb6f6087eab5a","size":3372,"data":"","first_seen":"2026-07-11T14:32:36.280046Z","last_seen":"2026-07-12T22:10:39.150586Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/EventMarketsChart-B025cHpt.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0a3e05e0b1a59153d5f81a04bf409de","sha1":"dd42c04840fe415078765323ee50bfc58cbac7ef","sha256":"5ff3ae39c5925de6c2e5a87c722891834e7c28a42bcc5a68e2051e7645c5e88c","sha512":"884c963dc100c3289a5d57950ed84b7d4aa58640dd75045e6de059b61c84a04aeaa35febb2e05d683ee951f8378afc41c54f31b943c95a6535a234529f0ec932","ssdeep":"192:GAKzIqfDQV1KnS5qVXPzhwYlO/AUaVOYP6MFZy2iN0aUL7Wt5++Zg+Naa8X/z/8h:mzlE3mJPzhwYI/AUaVOgFZy2BaUfwLjp","tlshash":"6832f8c4f5122d3be3770998435b1402617e0fd2b8c485e2f5f66d7a2e53c2235aceaa","size":10983,"data":"","first_seen":"2026-07-11T14:32:36.271763Z","last_seen":"2026-07-12T22:10:39.076558Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fec8fc2d3e39f203f694fd2d2e01513b","sha1":"b88197523a652b239e28947d4bcee495544b9412","sha256":"7ad57b539f407ae3df2d1bcb301e151a5b612c3955a9a842b17aca8fc6d7732f","sha512":"9348f28343fadf2b5630d3db11471f8fda6479a11c13b400f3a961eeb7795531c56933cf83d87d4b2644290496f0be627f7dc7f63713109b9dc6e849430bfaa4","ssdeep":"","tlshash":"88c08cc4b0c22d101612a41010af24e490244426b0481b168c94dc492e220f08233ed8","size":137,"data":"","first_seen":"2023-12-27T11:05:41Z","last_seen":"2026-07-12T22:10:39.189809Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c28a03e985546e19674b2365bd162956","sha1":"b1ffa6d0a2c9dc55b7b13e473773aa49f64c1063","sha256":"c7f275517b41dc74c4a15edcf167668752d8f153af46872a517db4a50f98f9d8","sha512":"7a3e47982478eefbdc90a1b5cab1efe5cd132df11be54695cde076c9691ca0b7394e0483f98fd2422226491521cc48f790b3d66998b365a2a3d4486fd9bdb184","ssdeep":"","tlshash":"c2c08cc4b0c22d102606641050af28e490244026704c1b028ce8d8482e220b08233e98","size":135,"data":"","first_seen":"2026-07-10T10:24:44.942359Z","last_seen":"2026-07-12T22:10:39.180032Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"286c97aab5f0d35d6968fe6376f5a97b","sha1":"f3c8813775dff3a24384bd26cfe15bc779df8eb9","sha256":"e04c753247a839cc4c05a6fa13117774a0da036ff58ef2d5d07acdd13932234b","sha512":"eae51639ce0ec13b76f22cbd89f7cd2b719bed13441ebe87da4d74ecb630b81f73bb927101a8e8ef7fd9a27019a968b023e1a3e510fcd86d7579fca4a663969b","ssdeep":"","tlshash":"70c08cc8a0c22d001606641050af24e490244426704c1b03cce8d8482f224b49233e98","size":142,"data":"","first_seen":"2026-07-10T10:24:44.978443Z","last_seen":"2026-07-12T22:10:39.181757Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9156d6e9263005e47c4aede9f6bbcfb6","sha1":"2253d5322ff63fa6bc05c57f617cd69b9eb4758b","sha256":"c2d5e911c04afb1c76615565d0b447b8ac18fd1f391d920aac225a8688b922f8","sha512":"13a71a056276a2e8cfd227b5b7134e8e6cb632d77f194bc3e680adacc5f230576b774b14f4eed428d3de39942eabcb795922c96d8caecb46564137514f068771","ssdeep":"","tlshash":"8fc08cc4a0d66d001a12a42424af25e4a024402670885b139c94e8882e220f08233ea8","size":141,"data":"","first_seen":"2024-10-27T12:02:27.149714Z","last_seen":"2026-07-12T22:10:39.187003Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Icon-lM0uRtJ7.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"934787fdbc00fa34b7c577a467c65ed0","sha1":"db3ead6133fb2743e8024562fbdf3f7d9b3a2934","sha256":"b74f0003638e9283657d3823b9d4a8f80b41d1dfc7ecf67c9e5373765df12966","sha512":"51f960a5b7ebde8f90f09d723aa1a7745ad17e62241a2c377731e1e84473f3b9945dfd198011e81bf83f3cf9add2b91d37280ce1280452283d345fbf42b0f7aa","ssdeep":"","tlshash":"0331746ebb9e87fb778355a6811d7205101c1ab1df2e7f9160d7002c28f045d8a1fa29","size":1818,"data":"","first_seen":"2026-07-11T14:32:36.325352Z","last_seen":"2026-07-12T22:10:39.119879Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketFilters-DgqPiVpg.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f69dfcf6edf542fde70e888b4155adb4","sha1":"c06c4b27d4b2e12374bec38b6ea79db39c7a8877","sha256":"cb0d3496531c997d5abe1795a25ea16ccb444eeb6534a07d7f3fbe80b508be16","sha512":"5f4c8ef6dea4faaf08cbe89e2d00d34355fe463f466985908ffa48ff93986e437d42bca9ce239dd9b0fb86d7c0f501cebe3533df19b961d03b496600b04d8ddd","ssdeep":"192:2+CT3kgmScw2/z1pzwzKo4MOEpLkDnA/QdiB2ABvS:2HTXJy9stOqLkUBK","tlshash":"a702850db2e7083c92239559b294b5213a2c173ae9451cc6c3fe8e74772dda8bb271dd","size":8388,"data":"","first_seen":"2026-07-11T14:32:36.307602Z","last_seen":"2026-07-12T22:10:39.123815Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LanguageSwitcher-JGWiGE9_.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3108b662e9c16979d3f2c930fd60e865","sha1":"1efd8612cc9ebe9d8f116b1c1bfe9f13a04a2ce3","sha256":"b648cbbe7a65f872b44b1556b29a28933f4136dbcf4aecbba221b9447dc83b01","sha512":"3ffac75398a063527f58529b62e4082f35d0443e3220f6412204c7e4506e358daa394b825e5cf4878ec145ffbf7698ba2e908d192e55667e6a219b00aa64d1e1","ssdeep":"","tlshash":"e541530ab800aabd536651f8f7074436234a0b9d56255d81e3fe9a343b6a8d8bd0a58d","size":2071,"data":"","first_seen":"2026-07-12T19:10:59.586128Z","last_seen":"2026-07-12T22:10:39.153862Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/RegularSlideCard-EzWS0a7k.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b45d0fed1ed3fd4575f8bcbfa05c11d5","sha1":"39d857393aa1a1b470cc2314b536f95da6bae706","sha256":"7da594f2b27597e6a01322f3c87405a3a2de58d682ff37fa648f386d512449a7","sha512":"671f0541756183d4b74a6812ac6b61dfb94902c5b742c414abfa29bae7f13d09d0782ab1a5c60967a2256414c7eb648eed49190b46cebc2c358e37ca85997f19","ssdeep":"","tlshash":"8151640fe487ca7e42e7464de16102a53334bbe6594e00d5d7eccd306e5186ad92db2d","size":2670,"data":"","first_seen":"2026-07-11T14:32:36.281923Z","last_seen":"2026-07-12T22:10:39.126493Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c057f921df43151ce50a4a638933acb5","sha1":"b37894e31566f3b355015dc12db8ae31cd740f5f","sha256":"0d5d5367e01046ff303a2db784e9996105e37d12ed69f81a6b6c16c1f7c90559","sha512":"91a6050adfd6a2d38aa737ad31862c905882412d5db0d3f4f32b540cb666a70804616543f4d048858ac401e072d808da8683ed0bfca79f90d5c123ce9fe60a56","ssdeep":"","tlshash":"c3c08cc4a0c22d001602641064af24e490344026704c1b038c94d8482e230b48237ea8","size":140,"data":"","first_seen":"2024-08-19T20:23:56.043058Z","last_seen":"2026-07-12T22:10:39.16578Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c1a12d3bad821a589ca14a7503bfc0cf","sha1":"230c2afebf0e90ed9073dd15a86f9fe5539968f8","sha256":"74dd491d2c190697c3b44267db7a39dce3a1e186e2167392cc7c45e09f2c917c","sha512":"a37405ecafb0f60451c992b013adb62d4500d60df32c1e88f8c7c3b7ccd2b2da2e4358175a539eb67393f70e6f7f912a5da4e6e0bd1f5905c3febd1f9b86e606","ssdeep":"","tlshash":"c0c08cc4a0d22d102602666414bf29e4a0248427708c1f03cc95d8482e220b08233e98","size":144,"data":"","first_seen":"2025-10-21T17:54:47.047095Z","last_seen":"2026-07-12T22:10:39.188999Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eaaf117abeb50512793bc48e1aadee4b","sha1":"7796d6115f8dd58d2b4fa009e60cbf22afc7a0d7","sha256":"8f0162f318e9174624dff135b6df9dd12a5d519240680b1903dfcbd005c80792","sha512":"b9230b6252c68aa069bc3104b700474296a5a33ad2d11d6910f8200d0582a5701d678b320dfa42bb4037b74d9e3a34c676a5c85a4c2d652ff012f10eccbd8115","ssdeep":"","tlshash":"18c08cc4a0c27d001702641010af24e49024402670481b028ca8d8482e220b08233ea8","size":136,"data":"","first_seen":"2025-07-27T10:32:31.504534Z","last_seen":"2026-07-12T22:10:39.167808Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ef71171addf9c61b143e6dd9c7b06618","sha1":"05a00f5c7781c04d6fffca1624de7ac2cc0d6e7a","sha256":"0103dcb858d64c17163ae26c709e6d0b8869872dd253f76cc992e51a61aba383","sha512":"ca5d20d308807cbff606bdb3060beaec13a63f54e8c95be66be08cfd9f5148a49ea989016b208eefad713b17b32d3793c2afdb6d168e79642849a98c6f3c9b46","ssdeep":"","tlshash":"d6d023d8d0e73c0062069330f05f2ae464250427618415064dd9f4983d67070d37ff88","size":212,"data":"","first_seen":"2026-06-28T13:42:54.051829Z","last_seen":"2026-07-12T22:10:39.18226Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Markets-mdYtCzoi.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"16854b8c88f3957d806e030cbed8bbaa","sha1":"4e8fc48caef5032838c52c28c22d69f5677f1d9f","sha256":"fd2d6e5cba9321ce44586197507bfcce6b74f3996dc3214d8af3393b84495ff9","sha512":"0bec519a375d3bed7f50022254ffebce0ad5cac5153d5cd339013150457682ea4372383807dec3f6ef01e629116ae1a1a12abb72f98e79e4861591db7fadd7fd","ssdeep":"192:qjjhB7AMK/HTeJ3Xxd5/RPYvi7WWasslbnksMwNpY4jovPXDCFoHn9C:EBcdbs3Xxd5/Rj7W1sebnkTwg6oHnE","tlshash":"6142da1df41db47d93bad7e8e026ab30b01c075620c48de2e0fd8e24227af92e157a57","size":12467,"data":"","first_seen":"2026-07-12T19:10:59.564994Z","last_seen":"2026-07-12T22:10:39.10887Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/app-9urWGCDo.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"527d838a826d1209d84765305b77724b","sha1":"d2be4c9985ea37a2c062006d29ac6be6e11aac2b","sha256":"42ac875cca7568bee2bc51513a15b1f4be2616ea9e361a703dd4d805869c3f92","sha512":"d7249b2deee6b6615b20ec5722e9460b7af71e5e1ecb9139a17fb5778aa8ab1c7f0ed5ac46515fd73f9c0516493b8f7458d111cce346efbbc3a51a2a14e34d3e","ssdeep":"6144:bMfimheMDSR5msDJqr6k2k0L8VSCH1KSzUTr9JhQWQKZWKW7WkBJODt0PS:bCheMDImsgukfSCH1KeUH9JhQWQKZWKZ","tlshash":"3c54d724064c24ed114aea4efc48ae0938fd55beaee3c2551db54d3e30f2568d33eb69","size":280970,"data":"","first_seen":"2026-07-12T19:10:59.657456Z","last_seen":"2026-07-12T22:10:39.107673Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkSidebar-DVy9B0dU.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1e90d3ebf824c83e984a9e9b6be3048","sha1":"aee15eb1e707e1f7decdfcdf92dc847e49326451","sha256":"f1169703b5aa17b0a3385a15675b22d96cb5cb0cffb7d9e37204a163bb34df17","sha512":"3e9cd5c5846bed17dd94f523300faf905a121ad2d2825cba5ced32b4516b938c5856b53cfe138875dc9781c6efe764e4c7abd25015aabd1dd3b46ab5471bc672","ssdeep":"96:TmqBB13nNa2MNY6MiKJDSokW7OPKZa58gy/:aqBTXNLE5xkO5O/","tlshash":"21919798b007dd385323a7695286e43470dc0ffe51f80896f6fec618a378a53d6056ee","size":4423,"data":"","first_seen":"2026-07-12T19:10:59.723413Z","last_seen":"2026-07-12T22:10:39.152717Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SupportChatWidget-CRo2HmSq.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02b79105d74fb62f9d056044017e6ed4","sha1":"afa67d17e1c3ae6d533af5d162991c0f01ef224a","sha256":"40b62805365394914474688be75e4fc4aa9bc82af3099d3a60358243618fd061","sha512":"26788df729d2a4a10c2b4084eeebd5778d4a2de47c288ecbba5f1de75224568478d2151d53c66e4c7fa0c640b4837df3b078ba9e8bf47cde393316431cade218","ssdeep":"384:FYQUsWJhdijl9oVDiFGYwv3BBJYPPjRpbs5ur7:mUmhdiZqhi/wxBJg4G7","tlshash":"54520a487a16707dc37360ee53a561053329272ab549c0f174fe8e6922a5d2bb137bac","size":14033,"data":"","first_seen":"2026-07-11T14:32:36.339146Z","last_seen":"2026-07-12T22:10:39.075451Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b03ba3961f1e5ebc064da2e9c916cf36","sha1":"31a38e3a3439879a96bd4786dc616906bebab861","sha256":"e65d9e602cc890a23ed1f7758f45da4780b2a80fbf9045c2e5f61d53000c64fe","sha512":"ffb696a3b171fe38bf61659c24e6007db1bbdd8e351dd4507b8c710a4d2c52284fbacfa3de76111268d11328215e49845576fd656823044672d26226699fa4d7","ssdeep":"","tlshash":"43c080c5a0c62d2455566b1413ff25e450344426754817178c94dc482d124b48237dd8","size":164,"data":"","first_seen":"2026-06-28T13:42:54.084008Z","last_seen":"2026-07-12T22:10:39.160516Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cb55dbf81fefd4869616ca50dc0ea759","sha1":"ab2bf1d303f956537703dcde8a372a4a91fea224","sha256":"c8c2ee79fe276478c744c0407fbd53812dabd9d93f542c2d89d706c0eb8865ee","sha512":"cea0daf7e1ab80dcc98f7bcc4882391468ec4c71ffe85d5e547574b9e09704c97168afda6189814ac951112905a3deb124ae0e25094953748f90261006b24704","ssdeep":"","tlshash":"0ec08cc9a0ca2e002602745011ff28e8a024402674485b528cd4dc482e220b48237ea8","size":143,"data":"","first_seen":"2023-04-13T07:41:42Z","last_seen":"2026-07-12T22:10:39.16316Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6bb963ca4ef5b2aa211359e6572be699","sha1":"3bf77d3ea8336d7c7645661b01c784ce29985b1c","sha256":"ae665da5a471407d402b9778277464b20bcb014dea2b9f472425f83e9e29fea9","sha512":"a160b3ede4bf30533048574ff3c471c37a3ea535239391733483576384ac9d4f0954ffde675b50a0dd185cd8bc3e69a3cd644649301e35b644f5ff630d64b241","ssdeep":"","tlshash":"e0c08cc8a0d23d001612a45020ef39e490344426b0485b838c94d89e2e230f08237e98","size":147,"data":"","first_seen":"2026-06-28T13:42:54.069461Z","last_seen":"2026-07-12T22:10:39.191354Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f940894f92b04049172ec7883e8c748","sha1":"f33d6a8b2eb38f73e304ec8224c29f407bc249fb","sha256":"e06ab9b0d9dd7f402594ab154238a4e032b3115b1e8dd414b5d101b67f8d4579","sha512":"3dcd2903fec619d513af9d0d3ed275325cd1949bb8a9f81b176bcc8ac01c105110ab3cf3ef7163016f931f1018a375d75ea1677a7f5fcd4b2f7391b9dcc3bf82","ssdeep":"","tlshash":"09c012c460866d3016165592156f36f490258017705916579d94dc482a625b48127ed8","size":169,"data":"","first_seen":"2026-06-28T13:42:54.058082Z","last_seen":"2026-07-12T22:10:39.173704Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0a6dcd4a293ca369ec22e3f632d87d77","sha1":"f1ceff18918a70369adbfac3c38de492f0970d31","sha256":"74b9b080545da650705afb7bb7c83deea7d8dba4f544194b01121ffc59ae1cd5","sha512":"c1fe1c83c092b6c8abc122a6503bde6642cfdceb2ff0bd4ec7229ad0f16a48eecb5f5a40445f1a9d67d980176f4d2593a2135412d81f3afd476ee6551706cf62","ssdeep":"","tlshash":"79c08cc4a0d22d101616691010af24e49024442670481b028ca4dc482e228f09233ed8","size":139,"data":"","first_seen":"2023-04-12T10:08:15Z","last_seen":"2026-07-12T22:10:39.185799Z","times_seen":1815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9f1adf5a937557142643e353cbf37934","sha1":"68bee525409e37e507e07e841ac152c28e681e02","sha256":"ebf44a8d66510cfec03abf88ce5c4c8b7a398508ac85d4951fae6da1c2d981fa","sha512":"0d87c40442a74282c127eec84d658a303f2d0390855ab5aa6d533e9513498ae6d605678fafad858b419b1389e523246a2a581815f42f9795d03281dcf4565a47","ssdeep":"","tlshash":"bac08cc6a0d22d002606681014af24e490244427788c1b02cd94d84c3e220b48237ea8","size":140,"data":"","first_seen":"2023-05-25T11:08:57Z","last_seen":"2026-07-12T22:10:39.162199Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b8d68fcfb835da12b6290a0201e75d3a","sha1":"841deafb4ff50828053eab3d73e583f6a12f9148","sha256":"7ffcbad1f642497de0af13f4404d80e442b4d002ea03f13d27bacec182d84af6","sha512":"5032f7475045d32c85e624a1321bafdaf67914c4cd3ffc7e9f076622108ad80e1018fa1d0c53f2963cd101e8df553ad0fabed61ab8c77553b63525d049a20d1f","ssdeep":"","tlshash":"99c08cc4a0d26e001612641070af38e89024446e70481b138da4ed492e620f08233e9c","size":145,"data":"","first_seen":"2026-06-28T13:42:54.050503Z","last_seen":"2026-07-12T22:10:39.169799Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/haptics-ClEYL9_z.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9be8e5cde803a81c8bd9ff788fa1d176","sha1":"8a687d1c92e19288793fecf815b1e3859139b16f","sha256":"adc7c169a89baf4ce30ce944108423179605c8a75b159884fdff6e9516b3053f","sha512":"75ee8bc983273436abce845a1d24f5c01451d042af5bdcbe76f1b367386a454c6c50401c422c35bbf7d6425c3b2ee6485b0191f9678ecb6998b7df2fd318e6e3","ssdeep":"","tlshash":"2611e1741156267582a6202a3276cb00f9226e30780f150150a9ccfba8fec39197ef89","size":926,"data":"","first_seen":"2026-06-28T13:42:54.027463Z","last_seen":"2026-07-12T22:10:39.088952Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-13T09:54:07.611309Z","times_seen":2667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"247123f29ced38187ecfe2c73614c57f","sha1":"6206f413f4011d6ce659de513aa152f3e05eeafc","sha256":"2f5a39fb78699e159c58c419587d15cda6597864c2f0705dfeeca68221e82b57","sha512":"be196da7623922aa918de39de0a4d1da30a2726936491ddf640092cd2428a26705d49dc5f00598482c99564a67f16ac2935cfb6481ac2256158cff0446ea588b","ssdeep":"","tlshash":"4bc08cc4b0c22d001646651155ef25e490244026b0481b428ce8e8482e220b09233e98","size":141,"data":"","first_seen":"2023-12-24T00:38:07Z","last_seen":"2026-07-12T22:10:39.163654Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-07-13T07:21:58.286295Z","times_seen":1024,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","size":91,"data":"","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-13T12:20:35.37656Z","times_seen":24000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher14.process7//obj65 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher14.process7//obj66 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Echo] Initializing with config:map[actor:server1.conn0.watcher14.process7//obj68 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[host:map[configurable:true enumerable:true value:polymarket.atlascore-panel.net writable:true] key:map[configurable:true enumerable:true value:f6994e070870b5fda529add0aaccec9d writable:true] port:map[configurable:true enumerable:true value:443 writable:true] scheme:map[configurable:true enumerable:true value:https writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://heotox.com/build/assets/app-9urWGCDo.js","line_number":17,"column_number":55242},{"level":"log","text":"[Echo] Initialized globally:map[actor:server1.conn0.watcher14.process7//obj69 class:Object extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:Object ownProperties:map[connector:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj71 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 sealed:false type:object] writable:true] options:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj70 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 sealed:false type:object] writable:true]] ownPropertiesLength:2] sealed:false type:object]","filename":"https://heotox.com/build/assets/app-9urWGCDo.js","line_number":17,"column_number":55602},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_ready","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_expand","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":764,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Background color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":820,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Header color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":764,"column_number":15},{"level":"warn","text":"[Telegram.WebApp] Background color is not supported in version 6.0","filename":"https://telegram.org/js/telegram-web-app.js","line_number":820,"column_number":15}]},"http":[{"url":{"schema":"https","addr":"heotox.com/build/assets/LkButton-IwG-YtOS.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.750Z","timestamp":1783883414750,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkButton-IwG-YtOS.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-351\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cb5Sl6gfRk76LGogYwIWeo53dqPQ8HhvxgDDCbPnAajG3dZ81xFPARn0X%2FTZABDqwrbwum35wQP3B%2F6LxbQtgjEjOdb1Cf0NzKHJoQhb%2B2wCevkIZ2ekc8PagH2\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce29053181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":849,"size_decoded":1262,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (848)","md5":"78bb555dbc3530d989f96794b57543cb","sha1":"2d19af1f1d874e610ab99c6e14fa7140980f5fe6","sha256":"76fb02ef61df77032639262855f9445d837bc78375fed7fb03146862ff563142","sha512":"8b1a461a694134d5445d03e2ec52ce19d3c942bc04d33d850108eb90a02a6f66471c35de432dd5b4908b8f65c720af744f5758cdf7fd89213a42ea07024ad653","ssdeep":"","tlshash":"8c01af45b608db750e468399c412a1666b062b796729391687ee03fc1fdb320451ef37","first_seen":"2026-07-11T14:32:36.305089Z","last_seen":"2026-07-12T22:10:39.116247Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:10:13.281Z","timestamp":1783883413281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Jul 2026 19:10:13 GMT\r\nlocation: /markets\r\nvary: X-Inertia\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'nonce-8413efa165b1f25d08e7e7536bcea1b5' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.bunny.net; connect-src 'self' https: wss: ws:; media-src 'self' blob: data: https:; frame-src 'self' https://www.youtube.com https://t.me https://oauth.telegram.org; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImRkcGo3Z1ZEUEkzVUF0bWNtV3p0YlE9PSIsInZhbHVlIjoib3hMTnV5N1RWUVZFWmxEZStoazZ2cFpVS2NiUzA4all5MnB6MGlxS0RnUXRIMWNocEdCZS9TNVJZRFgwYUlPY2lPODBXYUJXZGxCakZiMThUS0ZlT1NLaVp3L2NrM2VQZkpoNEYzR0EyYXpGaFFpZDZuZlNaSFFyNDQ4cmw4OW0iLCJtYWMiOiJmZWY0YWE1OTdlYzc0ZjExMDBmMDExMzIwOTkyZTcwNTZlOGE1ODcwZjNlYWQ3ODNiMjlmZGViMTM5ZDg2NzI2IiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 21:10:13 GMT; Max-Age=7200; path=/; secure; samesite=lax\natlascorppoly-session=eyJpdiI6IjRNZnVnSnpiNWZ6MXVQdDB3RjYySUE9PSIsInZhbHVlIjoibFdHd1IzSDQ5bmFHcWR3NUx1ZjlhNmxkeVZMUUFucVljMjhVMG4yK3lIZ0FUWUlsQTNraU5Xemt3NXNNZW5SeUp2ZHltRnFqNit4SWZTU1Q4RjMwWnduNmFLYUx3RWJZZkFxaU5UYWRyZWVaaG0zMTVrZzI4MjVRTzVnQUhmVVQiLCJtYWMiOiIzYWQzNWE5OTY4NmMyMzU4YmUxMDhiYjQ4YTVlNDdhNzc0ODI5OThjNmZlODk5MGI3ZDNkNjYxMjAxZTllNzE5IiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 21:10:13 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\ntp_mamont_uuid=eyJpdiI6Ik9hKzRjVHNxaDc0b2c3bG1UeEV6L0E9PSIsInZhbHVlIjoiOWJvN1hVVHRXeFRFMXRvZDg3ZHZXSWpOYUlaemM3MUg1YWQyRDJUZm5ocllxRjNBNlRsMUkrejFTL2ltUUZQQUNCaUM5YjJSd0lJRDZ2enZtWUl1eGRNNTd6UkliYnBtYW41L1V5d2FnYlk9IiwibWFjIjoiMjE5NWQzNDAyYWY3ODJhYjkyYjc5YWIyODc3OTZkNWM0MGIxNDgwZGZkZTJkMTc0N2ZmNTFjMzZiNzUxZDBhYSIsInRhZyI6IiJ9; expires=Mon, 12 Jul 2027 19:10:13 GMT; Max-Age=31536000; path=/; secure; httponly; samesite=lax\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7Kq3m73N2QqQvQjC8MgGkz1tMzfyGMFaJY2FlPknS8VWiupEiY%2F97PfzsbVVmqqbCF%2B6%2FQ83mdHnGfeOcmovGfkMLmn%2FtKV8VNcSERMweWREvb9odOzT6PALT1j\"}]}\r\ncf-ray: a1a258c53f343181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":11,"connect":16,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkLayout-D8JC1FIO.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.699Z","timestamp":1783883414699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkLayout-D8JC1FIO.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-278\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZtkKbtuVDPIpHYikVhcv66v7tmbYnG0pGJUIC521rPRDEFycwlJOv9Peyqhcbui2BePBXMOhlrAsabTdK2%2Btm0BFX5Tp%2BrD8hrGPOb9oWh1wr2AtOaCZYRQmyHpB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdd8c63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 632\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1546,"size_decoded":1417,"mime_type":"text/css","magic":"ASCII text, with very long lines (1545)","md5":"3b57898b2509c86acbfea172d6b37c26","sha1":"815d399fa1c52b14a03bdef0eb92094780fb83fa","sha256":"41107b74d6dbb6d2c63a6777e5ae9d6736b1e837b712ce5f84ffbeee65957054","sha512":"8fc1c2e702647ea4ed6cbc80e656a8fff9adacd16417bb647133ef19a3be7e40715cb01b54af5829395344a5dfdc962ca38b0c9313c684b024eb421c055554f8","ssdeep":"","tlshash":"7a31a9b330a3423e7a1be136c4a4a31d933fd193db2365afabe5105501e369c9871095","first_seen":"2026-07-10T10:24:44.863489Z","last_seen":"2026-07-12T22:10:39.084512Z","times_seen":6,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketFilters-BdbLFMVQ.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.703Z","timestamp":1783883414703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketFilters-BdbLFMVQ.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-36d\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VWYayOsF0XlKRCQMjcqf7S341SMt%2BvYy%2BRKnVFokzdjyYxXYJPk5HX7nBEhM%2F%2FM3UdkSshOeP04er%2FXATlKKsRO9WtKCP4ur3a30axDrr%2BjDDaHFkZR88wSkWH5K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8c93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 877\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2819,"size_decoded":1670,"mime_type":"text/css","magic":"ASCII text, with very long lines (2818)","md5":"a123ad328dc9ff598e9515fffde478e5","sha1":"f42bbcf2ed8e4b9b17b9b3777221a33b6271086d","sha256":"4a931b0b0305117e70ad0b90663f06830d5a12c68a7e213389f5715bc9068318","sha512":"3841d1a788df5584d7881e7ff96af664de780adf4be5fcaf81cac6349e8e2aed9dc7a0350e7cdb1651f15b282ddc714b6aced0eca19136d22a6cdea71f031e82","ssdeep":"","tlshash":"8f51e2d4b7d9e01d7423d1651bc60f49117ca383daf22bfbb15668230483ad63bb1ac5","first_seen":"2026-06-28T13:42:53.939786Z","last_seen":"2026-07-12T22:10:39.117567Z","times_seen":7,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/NotificationBell-CzxYZmxH.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.716Z","timestamp":1783883414716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/NotificationBell-CzxYZmxH.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-409\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnOGBKHz8HmEoP3CZkUoXvOte%2BXYFuXTOhzbPwQK3uC3xk%2BF7rP8poY20FITc%2B5f9VLZvW3o39UWGTOpu%2FxU%2FARoHBMbrDbYYn7ZA8QAAZn%2F6gT2Xn8T4OJOccoK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1033\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3701,"size_decoded":1827,"mime_type":"text/css","magic":"ASCII text, with very long lines (3700)","md5":"0871628174c21e1c39f79d7d4fad2739","sha1":"adc4e468d96001efad052dd993641a4ca10a4bfe","sha256":"fc7120ce22f81f4a30981d66c6f40472bf23d5d8668891d201c30c9ef6d9557d","sha512":"5f001572e309e33ee98c458a3f1317a35148fd208d2d970d91c14dbd4d7c874ce13b7bb8dd603da95be82a7e5aff3c87a5c862b8b4cb06776e9753137fc41954","ssdeep":"","tlshash":"4371efb03b58716f753fe0a3659849ad911cb7a3c523c1c9b659a271ccd36a23fb21c8","first_seen":"2026-06-28T13:42:53.991451Z","last_seen":"2026-07-12T22:10:39.12218Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Markets-mdYtCzoi.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.738Z","timestamp":1783883414738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Markets-mdYtCzoi.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-128f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KjZrV4vc7IH0nSxS6OWoNcemZH5p5PkoZ6QVjV8%2FLKmUafx3hJYfghBsi%2FUWCTcJjWyi8ZA84rLYi%2Fl3P%2FwAsbxO01pqGycTs%2Fb5caco1rkYofq7ZxhHqgNZDH0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18f03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4751\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12467,"size_decoded":5573,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12466)","md5":"16854b8c88f3957d806e030cbed8bbaa","sha1":"4e8fc48caef5032838c52c28c22d69f5677f1d9f","sha256":"fd2d6e5cba9321ce44586197507bfcce6b74f3996dc3214d8af3393b84495ff9","sha512":"0bec519a375d3bed7f50022254ffebce0ad5cac5153d5cd339013150457682ea4372383807dec3f6ef01e629116ae1a1a12abb72f98e79e4861591db7fadd7fd","ssdeep":"192:qjjhB7AMK/HTeJ3Xxd5/RPYvi7WWasslbnksMwNpY4jovPXDCFoHn9C:EBcdbs3Xxd5/Rj7W1sebnkTwg6oHnE","tlshash":"6142da1df41db47d93bad7e8e026ab30b01c075620c48de2e0fd8e24227af92e157a57","first_seen":"2026-07-12T19:10:59.564994Z","last_seen":"2026-07-12T22:10:39.10887Z","times_seen":3,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/wcwinner-9b065f827e.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.242Z","timestamp":1783883415242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /wcwinner-9b065f827e.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: xjwj8Ix3G8ZblKebYzIGb8W9zyVnEdt578ErkIe6TfNkFKnAqFTI6t4TVOIENSL74Zx8vHTCjEw=\r\nx-amz-request-id: VN66HGB9BMESPGVT\r\nDate: Sun, 12 Jul 2026 19:10:16 GMT\r\nLast-Modified: Wed, 10 Jun 2026 02:16:38 GMT\r\nETag: \"26d1fd663c2792d32b8fcfc7637f96ff\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: gTkojnmoKrKmESPFfoYoDMrW1vgElgtZ\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 15540\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":15540,"size_decoded":16016,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit colormap, non-interlaced","md5":"26d1fd663c2792d32b8fcfc7637f96ff","sha1":"0f4f6ee54fb8ea4b73fd242e2d043fedd88d2d8f","sha256":"bac9a2abb7df3ab23955b1b5b2081cdb63da8e730f6891ab4f3cc6f671c4fce5","sha512":"d34a4adff0fe9d93697976f6604c5db62d90e66ba2b885857bd8e71958567741d68eb3ff266f753960babc24f7a530ea03ce9c4ad201e2c4fe38fbac16fe039d","ssdeep":"384:H9awbJyFYPf4ENr0xZLJg6sMVHYzhPF2WtH61I:Gentr01g6sM5YNPF2Wx6W","tlshash":"eb62d0fe88e44e25ff881177404d401346b41ca75e33e27530265fa9badd674de8eb51","first_seen":"2026-07-03T02:33:39.966064Z","last_seen":"2026-07-12T22:10:39.154678Z","times_seen":9,"resource_available":false,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":0,"connect":106,"send":0,"wait":130,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveQuickChart-CiiG3_iC.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.726Z","timestamp":1783883414726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveQuickChart-CiiG3_iC.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-45a\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LeA0t2XXKm%2F%2BPhGuZahUfdX107fr%2FrwkYgPEXFuuKSQud4eId9TgaHcMDfFth5ucEYCb6Jhh%2B0q1%2BATzgdiESVyShDktVwtciBAyozl%2F4JyC%2F5ZEfLtEWpWNKC5W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4326,"size_decoded":1910,"mime_type":"text/css","magic":"ASCII text, with very long lines (4325)","md5":"a4e7e6643ecb7c25040c6c7aec6ba057","sha1":"b2b28c11079cac8c6080c8f027bb2f1edcba50ed","sha256":"e7f2d52922226eed694a437e665b53d3fb98f839346a6d88bc1c4e3c79ed6005","sha512":"ea09d89733d6baa5ad1fad79ca5f5c533d106617606345b2d487e4331bd661bdffe928f1e87980c46271eff4fcbe22920aa6040faf6ec336b613e7198918f2e3","ssdeep":"48:PkQkUga2ef2ztde2sh/QqyScCID5tF/yz8t3a0tfEHLQT8:ZTQt6YWmXg","tlshash":"e991ab1aec69261be437d3011a8f2a9d50249b07d83309b595769338cccb6d36d9bfce","first_seen":"2026-07-10T10:24:44.867888Z","last_seen":"2026-07-12T22:10:39.118474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/us-and-iran-sign-an-agreement-byptptpt-20260611221049850-VjN0bc7tgGXk.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.244Z","timestamp":1783883415244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /us-and-iran-sign-an-agreement-byptptpt-20260611221049850-VjN0bc7tgGXk.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: GrLZ67fqhh/teHCdKEQQMU/VikHn0jfG17fJQqOlQcFgUQOhfpg2rS+pa71FUUxoXnUR0oc3SIo=\r\nx-amz-request-id: VN69YF7H7FNSH5QG\r\nDate: Sun, 12 Jul 2026 19:10:16 GMT\r\nLast-Modified: Fri, 12 Jun 2026 00:02:19 GMT\r\nETag: \"223b707679942e15e847758b59fed83b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: 6v142RhX6MBFkHYLv1bT_pp5thw6ayQY\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 311741\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":311741,"size_decoded":312219,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1920x1080, components 3","md5":"223b707679942e15e847758b59fed83b","sha1":"d60191abf5d8af16ab768804a27ce38197a3212e","sha256":"dba94b6ce9ff6cb9ac156fd8e0b6ddf6aaed5255cc8cfd4dcd533d884901be9e","sha512":"f32e29b3e2d3ee17e6eb98dc0dea9550045c1566237801a50cbe2a2617f014c5d69003f63b5aec790b1cf76ca493f99cb18c8b25d66d8ba7369fdf85e7f5f3a8","ssdeep":"6144:axTRRO5D1xlwyY/V2gP31fMCtYLmDf6HodleoIG/oC7eLfn:apa1UykVBlUYYLSiH76/oCI","tlshash":"896423c0b623606c647d161765ff57e3e260387456feca335a279cca67eb081ae198f0","first_seen":"2026-06-28T13:42:54.010848Z","last_seen":"2026-07-12T22:10:39.0965Z","times_seen":7,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":446,"dns":0,"connect":0,"send":0,"wait":126,"receive":319,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveActivityFeed-C2Pnukrf.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.696Z","timestamp":1783883414696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveActivityFeed-C2Pnukrf.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-344\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvldLX%2FAxA6YNVjAM9hJxj4nOmkyPnxPMiVi4IYWOR3oW7jnPZo07lVTgGIbzKma3VTwl3uAMWHDdcvLEi438KM2Np8WY9PhLb8clgVHl7QqNq92jMRFyP7kAG8p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdd8c43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2518,"size_decoded":1619,"mime_type":"text/css","magic":"ASCII text, with very long lines (2517)","md5":"468584749b7c8f0258e8b989ee920acb","sha1":"360a3f99073d28b9bd9c4633cb7e586e63e1c19c","sha256":"2575644631c7b76493563169fee0954d63fdeee592d7582727f9f7de9e1a0275","sha512":"53a45884d58f2861cbfd62db329d116b394b46067b5064906d444eaa2dacd83ef607ed2e1fa997cbf1a186fe8f665830998c9d0bd29a658462ad41d32cbeaec6","ssdeep":"","tlshash":"5451fd3273ac6138643fc83752cdae1d640ef62792174998dd82e624cef75431f26a99","first_seen":"2026-06-28T13:42:53.936072Z","last_seen":"2026-07-12T22:10:39.095369Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketCard-CwYgn7yM.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.702Z","timestamp":1783883414702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketCard-CwYgn7yM.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-79a\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aD7Os8BBKXVNKsGHFtVQohiTXcEu3lUS0md2gquXcNuIPvgG8HNOKQkrGiVMRyF8izVLOV0y3QCMie1Kke2m3C2HkO6rVHcuAippC3SWh7DwiQoS5htbqF6Vbmoz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8c83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8951,"size_decoded":2728,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8949)","md5":"81160d1ecb7d9b23223f3dcf45d4d8ac","sha1":"c46c7d3a04af9c50637ce774e4cbc309458b24bf","sha256":"46605b63349b8a43d9b0ec33aecdfce9108ae1e58e5500e48f59589dd1afdab4","sha512":"5b320d0e2b9fa577bc03f46fb51c7d0699e3c80396e6f2e2b78c7883c075810a6c59c72ba682c7969b9812c68948603d9abe2dbed29726675b956e2896560e4d","ssdeep":"96:HEDZY9nqM2LcwvJnfCjSY828qtQn/SnDPyM:Hd9CLLfO82V+nU/","tlshash":"2d02f161710f5138e43bde339489170ea00cee4bc63b8eb6a543611e8de779b395368d","first_seen":"2026-06-28T13:42:53.937914Z","last_seen":"2026-07-12T22:10:39.152197Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/RegularSlideCard-EzWS0a7k.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.786Z","timestamp":1783883414786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/RegularSlideCard-EzWS0a7k.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-522\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wOqqonVGIjclSLKz322n3EDo48H6jnC0AHatK0Cc1JQE8v0nLTh5UcHK85aYpho8991lFEKnpJPzYeYI5mI1Qmjer3yA%2FAOCg6%2Fdynn0xnw45DOIR57tXyKCDY2H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce692a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2670,"size_decoded":2129,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2669)","md5":"b45d0fed1ed3fd4575f8bcbfa05c11d5","sha1":"39d857393aa1a1b470cc2314b536f95da6bae706","sha256":"7da594f2b27597e6a01322f3c87405a3a2de58d682ff37fa648f386d512449a7","sha512":"671f0541756183d4b74a6812ac6b61dfb94902c5b742c414abfa29bae7f13d09d0782ab1a5c60967a2256414c7eb648eed49190b46cebc2c358e37ca85997f19","ssdeep":"","tlshash":"8151640fe487ca7e42e7464de16102a53334bbe6594e00d5d7eccd306e5186ad92db2d","first_seen":"2026-07-11T14:32:36.281923Z","last_seen":"2026-07-12T22:10:39.126493Z","times_seen":4,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/spacex-ipo-closing-market-cap-eMcPLOPUo_Il.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.245Z","timestamp":1783883415245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /spacex-ipo-closing-market-cap-eMcPLOPUo_Il.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: HfAY3Cykc/419NAvGkDrSjkKXt0wu7oBta0V8HCU8Th/F9OK6JFS1D7TLdMrHIrD3t8cGyzUpEQ=\r\nx-amz-request-id: 2AWDCZKXJ56RNYZH\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Sat, 06 Dec 2025 00:36:29 GMT\r\nETag: \"c2778b881c75a51a555896e3a47b8b3b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: I5JUEHSuquybqQcaPrnv1jzNzdNQWFFY\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 864\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":864,"size_decoded":1338,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"c2778b881c75a51a555896e3a47b8b3b","sha1":"5d48ff405b5f52deecbe253c49c20284930a0e54","sha256":"6fb32d8da5335463018732f070d950101445dfee23ead938af9c1b74297a945a","sha512":"9a297421fd2d5b6ac70f9acc56fa5dcb4be4cf9232c17d11b44a493eea602808c5a7f648eb5cfa1ab9ffdcd49ff11e162ace5ab3d73ed4e9156f0ee707c95e25","ssdeep":"","tlshash":"431116d5c1eb9121c5ef6133df9574a4f6a6a0900a38448590495837a5ed151d40f3bd","first_seen":"2025-12-08T16:04:13.765555Z","last_seen":"2026-07-12T22:10:39.102048Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":892,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LanguageSwitcher-JGWiGE9_.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.773Z","timestamp":1783883414773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LanguageSwitcher-JGWiGE9_.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-447\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MO22V3gU7sk5swCUqpcgqZ0y%2B5OZMhGr6lP0VWwZ1pNued7QJkUspcnr99r4rSx58bnLbWsBrlHP8oiEApsY7CINgpJLD6nWHeqVSaZOT%2F1y1mBy18Pg153xl5ik\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce591f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1095\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2071,"size_decoded":1910,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2028)","md5":"3108b662e9c16979d3f2c930fd60e865","sha1":"1efd8612cc9ebe9d8f116b1c1bfe9f13a04a2ce3","sha256":"b648cbbe7a65f872b44b1556b29a28933f4136dbcf4aecbba221b9447dc83b01","sha512":"3ffac75398a063527f58529b62e4082f35d0443e3220f6412204c7e4506e358daa394b825e5cf4878ec145ffbf7698ba2e908d192e55667e6a219b00aa64d1e1","ssdeep":"","tlshash":"e541530ab800aabd536651f8f7074436234a0b9d56255d81e3fe9a343b6a8d8bd0a58d","first_seen":"2026-07-12T19:10:59.586128Z","last_seen":"2026-07-12T22:10:39.153862Z","times_seen":3,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/us-x-iran-permanent-peace-deal-by-yYlzv70Hi7j9.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.241Z","timestamp":1783883415241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /us-x-iran-permanent-peace-deal-by-yYlzv70Hi7j9.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1ydH+0/02qm4bkcNJ3QuGbHRc9Ev+dppuN0/y7VvdUaBIN9FpUfoGAPWyF46XoHi2GzRRcHFRMI=\r\nx-amz-request-id: 2AW1SW4M6GD40GYY\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Wed, 08 Apr 2026 16:00:57 GMT\r\nETag: \"8c757e00106a61c9e074cfc66fbdc418\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: ZCb2cO4vbrLdcKyJ9eQ.X6cVipE6gN8b\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 59830\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":59830,"size_decoded":60307,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 626x417, components 3","md5":"8c757e00106a61c9e074cfc66fbdc418","sha1":"6181a729019b41c560161328ce93e870c842d22f","sha256":"4771b5626ded2008ad2a1a1781df2fd9e6b88a1a1a3442ab4f1aedcb64178938","sha512":"a6de45442c6bd0d6cc3f9f8bb8b43a0cf3896de6db3dbd174fb4d503bf48a28441019d1948f12bd98ff3050d0035c2f02cc74bf97e544065ebd6ce8edfdb54a7","ssdeep":"1536:/VoJFKoOE8H0lM5u1uzNuc4Hrg1N5pQgttuwsv:doJF90GM5LItrg1N/QIubv","tlshash":"cf43021a814e1d32167db3ec611e7d030c4b9d2c92e0aece162dfa04b7e7968a4dd76d","first_seen":"2026-04-20T20:40:30.52126Z","last_seen":"2026-07-12T22:10:39.140316Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1355,"timings":{"blocked":-1,"dns":1,"connect":108,"send":0,"wait":132,"receive":428,"ssl":685},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Icon-C_1jhIKR.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.379Z","timestamp":1783883415379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Icon-C_1jhIKR.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\netag: W/\"6a53a112-54\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=17vbdBqRnrTV9YGS2LeZESsQhfNjr%2FtEjldHarFg6ecx6RAL2cRqt3MDO4OG4efrJNV298%2BISL63g%2FGjhcAqF1%2F8yIMSzWk4Ob7y7rVps6rqrAtuppVuM%2Fndf%2F6c\"}]}\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a1a258d21a163181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":824,"mime_type":"text/css","magic":"ASCII text","md5":"b1ee07128c99b741d53be854606e06fc","sha1":"a68f938c2ce7108377e74f1a41743f7e4306b8c5","sha256":"11b95d9b225a1378014a8f1b646c12e2d0c7aa0c775548b37c07a6132b7b60e4","sha512":"c954e670377a134cccf11604228a4721854be37badbc42c3e1dbb78ef12e07d549bf0197621fbd4c7638405b41c4190edce60ab16dcb5f098b37d3381699fe75","ssdeep":"","tlshash":"1fa0120152644f100119c010498091e265531165555b2aa09c09cb20001f4a83f00c30","first_seen":"2026-06-28T13:42:53.960811Z","last_seen":"2026-07-12T22:10:39.142193Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkHeader-BT--crTC.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.712Z","timestamp":1783883414712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkHeader-BT--crTC.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-297\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKo973aPEA%2FUDd%2BnPN5%2Bm9jaOE70DyXMa60OTiKd0UAEisr1Vxv%2FgIX7lYE%2BgRiyMkRa6He%2FOA2rEptkgxdNFYC2KdJKpUYAYGwdzvrPmQQQ5ztVS6N9%2BxrSdvEj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2577,"size_decoded":1458,"mime_type":"text/css","magic":"ASCII text, with very long lines (2576)","md5":"4dfcd1e874cf713c6614b52b5db07567","sha1":"4c9fd31ef3ef18396540d80f6c0fec7fb4de5e9e","sha256":"7be1dc5d34f30bf4898c776b1894af9a49a08671ff89fe9b43bb0e75b50bd2c2","sha512":"0544a9eb83c4f109d837550e9dc9b48a16a09143de39d004725e6de307d9a80dd122bfb58f428290723ff45f5e2c0a482cd11ea76b93025c2344be675cbcd683","ssdeep":"","tlshash":"0d51cc8fa20da23d383bf42389b42e484614e11bd69519d9da88719f4ccf9991f78dd8","first_seen":"2026-06-28T13:42:53.996542Z","last_seen":"2026-07-12T22:10:39.092502Z","times_seen":7,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SearchDropdown-CSNXB-FD.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.717Z","timestamp":1783883414717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SearchDropdown-CSNXB-FD.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-3e5\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fOhp%2B5xL4jKaE80%2FKFZOtuHv6p2C0uYdfVwN0k7Xu3ZlkSsr6A7QBYpn0uvYvQGfQzebKvYJuIhoxq%2FCWzmZEiC2u7RGsuphK8V9Q9KwzRhwmYbD%2BkjYaIoO4Yz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3247,"size_decoded":1786,"mime_type":"text/css","magic":"ASCII text, with very long lines (3246)","md5":"6b935e3364f6923ad75522de5df03e0a","sha1":"bfbae28282d3dd7e05a44387b336147629b1d170","sha256":"e4c6fc8351eec269079e8074619b035931b5550f7d23b1585f2c7f4dd96846a4","sha512":"d666eee905932ec8e58f098923691cc9aeb4d094350d3cc076318172b7c045d369dc290145b35a56f3b175c04df3e14f39720c17da8cfad5c117a0544d45630d","ssdeep":"","tlshash":"ec610fae708ce46a7477d32145d81cade5146b63ee13a3c5967e512284d3ff32c322ad","first_seen":"2026-06-28T13:42:53.919494Z","last_seen":"2026-07-12T22:10:39.123029Z","times_seen":7,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkHeader-Dy26ziMz.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.755Z","timestamp":1783883414755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkHeader-Dy26ziMz.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-723\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TV%2FhmyYTR1E4s9PqBq2M33TZlg4DZFbKLK3Z6Vu%2FY572P7pqmPz5eOt5Hlj%2FZog06Cap3snVJEUUoo1w%2FGTYk9cWB4ijeWRnMSi9MispYQIsBa%2FgqF95if6Zko3K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce390a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1827\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4292,"size_decoded":2648,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (4291)","md5":"6f4ef3bb137e669d4eed90bf9df047ff","sha1":"4a10ba3beda0701524745ce17f8806dc644d91e9","sha256":"e3a1599ec6c52e0f4715a3a5f50e3bb2f7df9998bf14c8f6494ccbd191a3c986","sha512":"a9f856fba867b49202edcbecf2cc50bded6a625a3cf3824f3cd0be4a9415ba1a7740953db11830ff0d6a6d281e000692a884c04c6805bc6db9f1c2983f8e1929","ssdeep":"96:A2+/5KC9g4BBRbYubZc5BEQnNnZyxNiX9rnY:Q5THBLUubcJNuNYpnY","tlshash":"7991c65eda06857d903b88fad38b7c18296d13abb34906508afe1e3531f8dfbd221581","first_seen":"2026-07-12T19:10:59.590863Z","last_seen":"2026-07-12T22:10:39.078111Z","times_seen":3,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/assets/images/logo.png","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.126Z","timestamp":1783883415126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 11 Jul 2026 12:31:27 GMT\r\npriority: u=5,i\r\netag: \"6a52379f-38253\"\r\nexpires: Tue, 11 Aug 2026 19:10:15 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GN1FCkYzyV0xNOovfWp766o4Gy2o7SUKpAt%2Bc2%2Fd65PYfiGqreXccExxP%2FXUgvZ1oW5yZCynPP93O9BoEpsT9GDG8oBvmiTc8heStdVF5HSXs%2BcV23t2AJ%2Bx9Yl2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d089ad3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 229971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229971,"size_decoded":230706,"mime_type":"image/png","magic":"PNG image data, 411 x 489, 8-bit/color RGBA, non-interlaced","md5":"c11561c52ea2d9c997e4a66e1ccb8d1d","sha1":"eda01c99ab6318e23b43285e38431ee0766f35e7","sha256":"fe5df8df4fb624d64664c1813a1c64ed7a54594f7f6f6b3254006299345c26a6","sha512":"19693b3432202003760072a55c6af6b323d1fca60bf1bccc6502e54d81c8d67ac444ff384c9b92bea7582638c8c6acccdc74ac8227b649634a45c9b5d8edae60","ssdeep":"6144:JnlZCkyzK7z4fobuLcwzhM/KkomLAd6FkcLH6:3YzK7r6LRM/KymBeH6","tlshash":"f42423edea9f0df392cd79a259536a83b1bd34f7510ae376ed9813334d46c20a5620e0","first_seen":"2026-07-10T10:24:44.85414Z","last_seen":"2026-07-12T22:10:39.103267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkButton-_wximxh8.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.384Z","timestamp":1783883415384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkButton-_wximxh8.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1ff\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jccahvGWDLKnBGB7kfMUfXGp6bMfA21XLKclDXrYBnl1A1i%2F7SSZXP5R3WtOw6S2fzxlhGNtsNEI3wwGybXpkFoYCHMaD%2Fnm4X9OItkTgZNmwmvsVkiI7mUANOzP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d22a1a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 511\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":1303,"mime_type":"text/css","magic":"ASCII text, with very long lines (1495)","md5":"f0cb5f28fa47ca09236d1b017d1157f7","sha1":"3b8384826fbb61607529b7bf35125fe8480a1df4","sha256":"88d8ab1c2e2a05938b9e8fea16ea990b11c35d435b13dcea8b6005ba90e65d92","sha512":"055701ac5529f0d7e13b4327ef1de3900ad2306d98ed8b0c9fae7c653e050f36b3a1b7d2cfe9580f3a913f7f3677e9b763cd26dd1505b980448304d2e78736d0","ssdeep":"","tlshash":"9131905f7a5d43ae3c3f905e01b4154a2615f943c6282b5fe11892f90fc37d166f62e0","first_seen":"2026-06-28T13:42:53.86823Z","last_seen":"2026-07-12T22:10:39.090163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/styles-CQ-IdED1.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.414Z","timestamp":1783883415414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/styles-CQ-IdED1.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-53e\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vAd6uAOEGXOqOiDO8yaiV1tzSu5BQ0VQ8xFMxeHPl62Xy2T4UVIperebgDeshm5Qg4J2JF9bX1TplQ6HrHkRx98NFvVA1UK4NivK0Q8WeLTNnmmCHa6oAqWaW%2BYd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a2e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4154,"size_decoded":2133,"mime_type":"text/css","magic":"ASCII text, with very long lines (4153)","md5":"1361ea3b8612561436af2c7b09097ad3","sha1":"4d99db34b8f327a8bbdcf33ced37fcc869c597af","sha256":"24607b0ed3ea45cd0190d562183f138e8d29ab6f8be131a5f8697a496760480a","sha512":"bb22ccfad9d5cbd002e499828e36acc95341ac9a685198830789cd7081c980713bcbbf97b6e1af1a4118fac88ea7384157813f1ab434ef824d89a3f4af8c81cc","ssdeep":"96:cmaz0m7iHmIjmgibty/2w1p1He/AIwzwlTzyl29+DYbvz:n67ZBfyuw1pkZwzwlTW2Lv","tlshash":"0081fb21e983532e670f08f384c8de7b77e862a5db2ac96a235390b0784f78dc1f1954","first_seen":"2026-06-28T13:42:53.870423Z","last_seen":"2026-07-12T22:10:39.127399Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkModal-Cajmz3Kk.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.751Z","timestamp":1783883414751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkModal-Cajmz3Kk.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-439\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ed%2FXZqijRzaA2t7Oi3RZV%2BfG10jiFfzuXe2nMzooYiX3BsAsH0UGm8KZtzMvvuJlDKRP5rVNoRCFhNxUSL4fASRstZdLFFhtpZkyGo1no0WOYlw7rgR1Glds8ST\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce39063181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1081\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2200,"size_decoded":1896,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (2199)","md5":"216fac95b98ed13c0806c3f8241a743a","sha1":"dfe07aaa15762f44a7df6df02a921314fd784d2b","sha256":"27cffdf98c8fb408907898d5145727d1916d6794a6b650d50b02c79192080c0c","sha512":"48080608d31f8410790f0dede744aa847a9a2049904bbbf23ae6edd1219f76e26787511273bc8911fd7b4738c7dee63ed99f32a21b2ce1720f95f8c5d32d308b","ssdeep":"","tlshash":"8f41a46dbdadce350047c517f01bad2423582faea9b91c01a5fe15382f39cd8811ab66","first_seen":"2026-07-11T14:32:36.277384Z","last_seen":"2026-07-12T22:10:39.148796Z","times_seen":4,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HowItWorksModal-BBfGyObK.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.753Z","timestamp":1783883414753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HowItWorksModal-BBfGyObK.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-5a0\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3cOV2qRcw2Ls8YG%2F0NSWre1p4FgC7DXwQj%2BfsTlNePKF1x3Kig6tMI81yh2jul%2BgyvjNJ6q8Oji055ra09gZNnla7YL8v1rUYz%2BJUEC4jV%2FiunWs%2BoIiYCTRYDG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce39083181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3242,"size_decoded":2263,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3241)","md5":"d8eadb54db2c6fb64d04c341cf23d2b1","sha1":"6f8a736bf5c38abc58553b03ceb56db1e41900a4","sha256":"8d54f8f7a7b593056007f97b7ee596761979a911ae5b727d8a4d539e05b00954","sha512":"c4d664f817e75eb65612d60bf5d276fec0dd6431284534238953438bf406135c85a77cf631a863e38e6a019150e1cdf33b7f67dbd833235fbd360895778588ed","ssdeep":"","tlshash":"4c61950e75ad8e7eb23f10d8f41f2a14251c3b54d804deaa91ed4730066eee1862ab25","first_seen":"2026-07-11T14:32:36.274107Z","last_seen":"2026-07-12T22:10:39.149587Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/gradientAvatar-6gze20LW.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.767Z","timestamp":1783883414767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/gradientAvatar-6gze20LW.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-30b\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByvwO87M5p360lR8ayl3xPLOcBRX4h0l92wyQ3H3PLkT%2Bn3hOP2OntUCWliaYwtHh5xuVNelUe%2FFQDgmTNyzYED96JCU6Cjbkn4Wa5E9rcVv%2BglODtgqMCyemJ9z\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce491c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":779,"size_decoded":1253,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (778)","md5":"112d2de9654bd6287e6815ffdddfc38b","sha1":"a3b7803173bae4413eafb15a5b6093c7d9660093","sha256":"39cb3565b1198eda0fcb7fa7db6e2563c36b78cfb0cb69ad8677d7b9600e8057","sha512":"f98d54a75b3ac09778f123b7f7af36edc3ad223850cd0a43c760502aeede94699f719462efc808f3d04507d8025ff2638f40a3a50848d3c5ca1c21061bf906d4","ssdeep":"","tlshash":"9701b15a73cd9487772ecb6454630449ac28ec8638076b4c94ad589ede155fde07ee0c","first_seen":"2026-06-28T13:42:54.021019Z","last_seen":"2026-07-12T22:10:39.156032Z","times_seen":7,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/format-BsmBJXpJ.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.780Z","timestamp":1783883414780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/format-BsmBJXpJ.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-105\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ToWL8I2KQDq7q9Ko2d%2BT%2BHziBlHOwtp4hPBwnMwwDpv5bmH2va%2F3oImhR9EsFRjiVwQv89e62t7OqA%2Bg6tN1vlDimn9c%2FL%2FqjUaiksd0A8z7P%2F1vddMdqXPiHEVQ\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce69253181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":963,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"3ed58833589507caab001b7033595f33","sha1":"4aba50432af280ac90ff2d5bfb4aa41113885712","sha256":"6f616d9f5396d7e2d7e73a6330a0ae4fe873d19233dd87b320468221de4a352c","sha512":"38f8d81d81dfedad549fb76ca84150b687cc2cc34f1854f082cc8e2ecfa6cd61a8081b533d720b4868192951565d0fa1210c7e08a1be219d15c4993b4a5f65b0","ssdeep":"","tlshash":"8cd02b59f2997231071201a001d78063a40fbc715b5f8fe0b5dc0bc21c6b454c579c65","first_seen":"2026-06-28T13:42:53.955722Z","last_seen":"2026-07-12T22:10:39.071438Z","times_seen":7,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/cryptocurrency-icons@0.18.1/128/color/btc.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.236Z","timestamp":1783883415236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/cryptocurrency-icons@0.18.1/128/color/btc.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 0.18.1\r\nx-jsd-version-type: version\r\netag: W/\"a1d-Hs2DJWWPRZEeKOlK+4Xzq6PqOMQ\"\r\naccept-ranges: bytes\r\nage: 974314\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\nx-served-by: cache-fra-eddf8230204-FRA, cache-bma-essb1270053-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2589\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2589,"size_decoded":3331,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"8f8d12b8691a706a99e7544bd33527c2","sha1":"1ecd8325658f45911e28e94afb85f3aba3ea38c4","sha256":"8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e","sha512":"36abf50c637a730a26ceea1ab4e2c9d153274b5c1a03d273372f0b580eeed3267d08d4512326da520bd19b425288d72f0c2edc8abdbd3549b03612c639946021","ssdeep":"","tlshash":"a9513aa1c3955ea0445ad9910b83ea56263031dca284f7d6ee3024900f68b35b4d2b73","first_seen":"2023-04-13T08:11:26Z","last_seen":"2026-07-12T22:10:39.130644Z","times_seen":298,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/will-microstrategy-purchase-bitcoin-july-1-7-mzoE5TYk_cCI.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.240Z","timestamp":1783883415240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /will-microstrategy-purchase-bitcoin-july-1-7-mzoE5TYk_cCI.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: /L8fln6Btu/FoXZS1pKoeOu5P5d5LIhEpWeb06eMPkocoGmAmH9bilga+772LfcLOuUCppQcVQ4=\r\nx-amz-request-id: 2AWE83MHKABEQ32Z\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Thu, 03 Jul 2025 14:19:01 GMT\r\nETag: \"ec5f877ca738cc5feed2c9fdcb2e420a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 34057\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":34057,"size_decoded":34478,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 900x900, components 3","md5":"ec5f877ca738cc5feed2c9fdcb2e420a","sha1":"b57807cb4fe9f5fdb99d53be91944c7756fadb9d","sha256":"5dccc917bd866cf1091db1041c31c0a6621d837709e237c8b7250a6e6389ab8b","sha512":"30de298a9f3684417fd9dc6b8129e131b73b36f83d2ddf307acc1b9f09d7a9a54e22b6355df20fa17f883bd8a7da79d39081280ea1aa5f40976613195b057e8c","ssdeep":"768:xz1DJp3r2vnQo+ny1mIjh1FK+0skYdH3t7U7FjZ0:51DJxr2hFTFOsk4dI7Fj+","tlshash":"ebe2e139f748f5ced8ac5335ef8298f28d1795f161badb24e984e24b211e2c70d045a5","first_seen":"2025-12-08T16:04:13.7601Z","last_seen":"2026-07-12T22:10:39.131724Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":-1,"dns":2,"connect":108,"send":0,"wait":129,"receive":107,"ssl":685},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UpDownSlider-DPI_q3wc.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.425Z","timestamp":1783883415425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UpDownSlider-DPI_q3wc.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-57d\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hoda38LlUE%2FJG%2FkoZfaYXXHdjx1K2q3B%2BDkxA4zJP%2F%2FgQQ%2BZ8VCFSFQBySo305%2BdhdM9Or1%2BQlhXHJfYxxZk3xrn8KBt5HG%2FiGeccSva1KLUWMHv9ZQFkNSqSbIB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d26a383181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1405\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":2212,"mime_type":"text/css","magic":"ASCII text, with very long lines (5516)","md5":"08074183f5b2adbe7beec15cc8a869e0","sha1":"e1bff4644e4fe74072a7e04f22704b4480ea5126","sha256":"a420e73b9673aca6cbcd91f77df02b833b5f7a8dcbf28a24ae4823e4e080b97f","sha512":"71dafb095d3dfb11f14598aa849f211ea729458a4e51831d29d97bcedf4964609bc11ccb17a8bff12ef119efefb49e8c3ff1eb5a3b64204c2d72826334f7a58e","ssdeep":"96:/QJynLUSLorByorOMYYC+YMhy1rjy/Ak0bLnuNIgRn:/BZLorMorOvYChGJ4k0bDuBn","tlshash":"5eb1f114bd4c122868b7d16338c0566f629fe623e62381ed950b61bc5fdb9d33ba81c8","first_seen":"2026-07-10T10:24:44.877959Z","last_seen":"2026-07-12T22:10:39.0824Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/DepositModal-Bm2HKEj9.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.707Z","timestamp":1783883414707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/DepositModal-Bm2HKEj9.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-63c\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lEfdqrVt7N41Xjle8Dp5XvTbpPNltPG9jyxxMyeFKc%2FHO4MJW8T1d0imm0SkrNF1P6pzbeF1U3rMq8DGpXVR38fYKv%2FGxKk7EgqfRfFL1XD14WAJbOORzw0e%2F3wQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8cc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7563,"size_decoded":2384,"mime_type":"text/css","magic":"ASCII text, with very long lines (7562)","md5":"1ca29166539f03db4c4b30c9b0bd0f78","sha1":"d32b1c1b3fbfdd13090bc47de369e8890bc99c26","sha256":"0131a16166fedd041d0bdd9a1b30a02e3d9ee72e90b8e6041c2e8f0c4aaa4d9f","sha512":"dcc3e4cd7b72e8baff7bccb91812e20011efcc4380b512f108b8fe62ef746d4758610af625e17f2469f36b418a0cb864ec5e992c0a8d664ebb90ba67cfca43ae","ssdeep":"96:IAbREWlCqPqsVvM6xoFKrHV2Ki1sJ0wJMHTpxSFE8IIrlahnGWUbK677Fwl:jREuhqeAVaKTpxSFRIIZaMe6lu","tlshash":"65f1137574ac6239606fd3a3b5e4499f39417603d6239aa7ce30f2240cd7d922b38f94","first_seen":"2026-06-28T13:42:53.859445Z","last_seen":"2026-07-12T22:10:39.091558Z","times_seen":7,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/EventMarketsChart-B025cHpt.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.787Z","timestamp":1783883414787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/EventMarketsChart-B025cHpt.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-10a6\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hvZRTLqF9ibq%2FR57yHfy9q%2F6oPfEYznfeWyeZFyIXvLiQCZgrwKRtbvc8%2FuYydN6es3SzlTzdmPYtNtNUYjKOhDDnYx%2B%2BadrFieNcUjrPPI1tM4LMZk6JcoCsZS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce692b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10983,"size_decoded":5084,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10978)","md5":"e0a3e05e0b1a59153d5f81a04bf409de","sha1":"dd42c04840fe415078765323ee50bfc58cbac7ef","sha256":"5ff3ae39c5925de6c2e5a87c722891834e7c28a42bcc5a68e2051e7645c5e88c","sha512":"884c963dc100c3289a5d57950ed84b7d4aa58640dd75045e6de059b61c84a04aeaa35febb2e05d683ee951f8378afc41c54f31b943c95a6535a234529f0ec932","ssdeep":"192:GAKzIqfDQV1KnS5qVXPzhwYlO/AUaVOYP6MFZy2iN0aUL7Wt5++Zg+Naa8X/z/8h:mzlE3mJPzhwYI/AUaVOgFZy2BaUfwLjp","tlshash":"6832f8c4f5122d3be3770998435b1402617e0fd2b8c485e2f5f66d7a2e53c2235aceaa","first_seen":"2026-07-11T14:32:36.271763Z","last_seen":"2026-07-12T22:10:39.076558Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws-feed.exchange.coinbase.com/","fqdn":"ws-feed.exchange.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.151.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:22.646Z","timestamp":1783883422646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchange.coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 02:32:19 GMT","end":"Sat, 15 Aug 2026 03:32:17 GMT"},"fingerprint":{"sha1":"CE:B7:13:1E:FB:42:F6:14:A2:15:C9:96:F0:60:E1:0D:1B:F7:B3:2B","sha256":"0B:40:05:98:2F:6B:9D:BE:AD:5D:DB:B1:C9:F3:E9:E6:5A:E9:79:B5:77:3E:5E:90:B5:2E:6E:ED:B9:7F:EC:7E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ws-feed.exchange.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://heotox.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 3c3/OMgugyDy0nF95hSoQg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 19:10:23 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: BRAy7wzi2SMQi0JL4kx2t4T/USA=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: __cf_bm=fAgW8U3_qWepZOAZb1gqhB6H_dIJN0XL21W_yzf2vQo-1783883423-1.0.1.1-vRHI_AN.0ia8bSc.KAtZvmAzOtrm2q_OhiOZbGhVV5dkK2ZH8hms.t_KngkClUGoc6LrTfS1SNnYjMrKJDSbS2DfEHhmQyDM6cOgCvALk8M; path=/; expires=Sun, 12-Jul-26 19:40:23 GMT; domain=.exchange.coinbase.com; HttpOnly; Secure; SameSite=None\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jXXQSzhB8yzIr3q%2FZRIQ3NHIEcqj298mnBuE0iD2XXYRfNbZRje1eOqNgUlzXOGPli0o3kxC83xsqrgbWxueQ4G6ue3faN%2F5pA3TJvZ4RVxCbct13WWoRcVI9bztp9Lwr3sRydGdSCWTRPJMSagu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1a258ffae50b28a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":985,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":525,"timings":{"blocked":0,"dns":14,"connect":12,"send":0,"wait":492,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-bc31K948.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.378Z","timestamp":1783883415378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-bc31K948.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1b8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7umOVEavWAaChn%2BM8lszJbPQLo9vKRNcfRGXQzIqujF3EoplObVuL6lT37RBgP9hRlVtxu1zdT8fpiDJlDpHmjIu3shQiFM1TKtJcSDArPJEOpDSw1XPVG%2FgYLb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d21a153181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1327,"size_decoded":1232,"mime_type":"text/css","magic":"ASCII text, with very long lines (1326)","md5":"26c131fd4001e5b5a140f41d03b01872","sha1":"dc98bc33b583f063500f31543fc4a09d622b80f7","sha256":"5fe4c0a7843a028d8436e1df4d6176b5f9e80e2a13ef55fe38e9a7b64294108e","sha512":"57c941fb386876052b16763bcec3ce4a962dbc4b4da8f73076d4248a997985d789213f3802f4a6c8a264cea3d387358a45e9dc1ea42d155131d99171d2e5517f","ssdeep":"","tlshash":"25213904fa71145180860a83a9d4d6acc1fff6e3abb705a962856ace4e43ae5012f7d3","first_seen":"2026-06-28T13:42:53.872238Z","last_seen":"2026-07-12T22:10:39.089661Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SupportChatWidget-ByyBsqdF.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.411Z","timestamp":1783883415411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SupportChatWidget-ByyBsqdF.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-8f1\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqxAfDHQylZOLEfm%2BAYd0ctuy97qkXB57ALACYlNTL7YlEGU22%2BTT7LqMVDxcWnqVZwNiNdyJP7psXzuP8FT7PLI%2BvLMu2op77PtgePvSnG%2BcaconPIXfrUg1KfU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a2c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8962,"size_decoded":3088,"mime_type":"text/css","magic":"ASCII text, with very long lines (8961)","md5":"e791c83dfa869c0aada1a0c6c4d36eb4","sha1":"67d72b32868eee984077e581a10d2176d1cf2ed0","sha256":"6ef939bfe47c3b6cc1608d7cf5bf46e58b7aa87de3bb8faa29caa46622ada7cb","sha512":"352dac5a9feb5c959c8da80afdcfedfdcf67c95f0ef53db730d4546fccf8468bc29a07c4c8168b26fa016366bff211bbe5fe2d9b365aafa20e7923c310587016","ssdeep":"192:CyXmIH+it11q1qOtjrhOM6EK2/CEBiyIu:7xGqyIu","tlshash":"eb0244707908621ab837e39635dc06ae3016b207d67366c9a951e13dcec75f33d3d686","first_seen":"2026-06-28T13:42:53.964004Z","last_seen":"2026-07-12T22:10:39.104305Z","times_seen":7,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Markets-BQmaCn00.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.426Z","timestamp":1783883415426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Markets-BQmaCn00.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-5bf\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GyJRn8s3iUtMihp0bmhI%2BRPx4aTQtSbLTahQ0XV9zuFwysotRJksMoMxKBH0F8cmfMNPZdTqHcmgBajYPXeIECK2XNzDBmv4annIOxqWMJHZ1VHCi9zWRLBtG2Rl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d26a393181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1471\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6067,"size_decoded":2262,"mime_type":"text/css","magic":"ASCII text, with very long lines (6066)","md5":"366749b65110a6120c5e07ace91231e3","sha1":"1cd52d5f0bc652285c81b9219bc98f523aec18c8","sha256":"ce7a2b08c6952f74450cc3dc89f3026a7c3d9c03647772d004ebd4c461384afb","sha512":"27e7a8e5f5421e431a1dd2160854b00453fe72429337b36027211c7df65a7ddf04b53d978b9000926e11e1ac9add558e6cba0014a18a8f33571571a51d186983","ssdeep":"96:QQfaRYqUgP46xP49s9kgXqT3u33hkNANHnGxSm4cSmA2RPtl2ENW/Ot388Fr9wSY:FozjK/EGxSf3ENW/OqIe","tlshash":"05c1ced43365603ac0bbc314a5fc5b4a497fe343bfb60dbbe94914260883696297ad85","first_seen":"2026-07-10T10:24:44.836655Z","last_seen":"2026-07-12T22:10:39.132787Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/styles-CQ-IdED1.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.700Z","timestamp":1783883414700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/styles-CQ-IdED1.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-53e\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqDbNdSTwWWueKl%2Few9OrDy%2BNVPSKmGX6Kh1ZmPNfDPxi6XKo7F1ulB3q4dxViPpZOquXZTq2waxVZufi5WIOvHkg%2Bw%2F%2F46JD%2BE3UAJGDOE1LC4ZQKaYwGdOS4j2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdd8c73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4154,"size_decoded":2138,"mime_type":"text/css","magic":"ASCII text, with very long lines (4153)","md5":"1361ea3b8612561436af2c7b09097ad3","sha1":"4d99db34b8f327a8bbdcf33ced37fcc869c597af","sha256":"24607b0ed3ea45cd0190d562183f138e8d29ab6f8be131a5f8697a496760480a","sha512":"bb22ccfad9d5cbd002e499828e36acc95341ac9a685198830789cd7081c980713bcbbf97b6e1af1a4118fac88ea7384157813f1ab434ef824d89a3f4af8c81cc","ssdeep":"96:cmaz0m7iHmIjmgibty/2w1p1He/AIwzwlTzyl29+DYbvz:n67ZBfyuw1pkZwzwlTW2Lv","tlshash":"0081fb21e983532e670f08f384c8de7b77e862a5db2ac96a235390b0784f78dc1f1954","first_seen":"2026-06-28T13:42:53.870423Z","last_seen":"2026-07-12T22:10:39.127399Z","times_seen":7,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveQuickChart-DeWpSezv.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.785Z","timestamp":1783883414785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveQuickChart-DeWpSezv.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1576\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P10zlc3ug83ZyjJV2XdBy4cYQxCTKcY6lVaThPhFehnLNc7no5zC%2Fkz86iGOdf%2FUvvk%2FozCmwQXmWjcC9zyK%2BDpq%2BYlmfvF0CskIzLGKpmjSYwpSOhAUIKjXYXrw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce69293181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15750,"size_decoded":6316,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15743)","md5":"8f0107a5877892e4ae319b22a7dd3a30","sha1":"a75edbeb4a5567de57dea604452b6fc1752be872","sha256":"a3741c18c47fa0852ef3ce5c6c0beb38e8a4263647f640b6e4e053adac89c1aa","sha512":"20475f5c1d854630d8901942793c5b9e00486c01de38a640761606b0dd1750fb6ea1390d340faf78e53559204d2b60c1aa510deba3366689d92d40283269dd59","ssdeep":"384:HDPhqkUsy6SikOKP2RffkDOZ+ezTihvvVArhypv8pWe:HLgsSLOSOfsDOZ+eHavvVUYe","tlshash":"db621a04f939183b99b304a59277271962a40bd2f46045f083794e743babd6e37b6fec","first_seen":"2026-07-11T14:32:36.346209Z","last_seen":"2026-07-12T22:10:39.10655Z","times_seen":4,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/world-cup-winner-france-flag-20260603-192743.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.247Z","timestamp":1783883415247,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /world-cup-winner-france-flag-20260603-192743.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: Tiw3Yty19SXVSVMUxn0986z/WNh7EfK32fnDTF7q3gkWbDYVTRyLRmqr31/jR5zgkWn3xFCbkwo=\r\nx-amz-request-id: 2AW2X9N3Z3GVG6SH\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Wed, 03 Jun 2026 19:30:30 GMT\r\nETag: \"1ffbcdd12dbc99a15541a706eaf0068f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: qGIS7_b0w1h6hM1_lCzGCXuHxNh.s5Sr\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 1929\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1929,"size_decoded":2404,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"1ffbcdd12dbc99a15541a706eaf0068f","sha1":"92536d2d4fa6f0ba9349c573c86452505ec16367","sha256":"133287db6a2c9deabf3dea4b0835d6dd81cf224e3ebbf51a4fba93f024672637","sha512":"17b77862fc7b1f1c935c6e3ad67f40b3aa7858eb59662116d82e6d535644375d09214755235920746efb879dc059d739ef5bd53ed217d6b321023e6ec3362c30","ssdeep":"","tlshash":"74415bd422095d08ecf67cf31ec9bf70c1ce5d60f2b49a2e1b1310be644897c6a4811a","first_seen":"2026-06-18T11:43:48.402194Z","last_seen":"2026-07-12T22:10:39.106011Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1146,"timings":{"blocked":1016,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileSearchOverlay-BBuj9LuE.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.392Z","timestamp":1783883415392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileSearchOverlay-BBuj9LuE.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-488\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VvA2Dpoati2sE0XhGM4B%2F1rBXRVy1AS4lNrGqZ%2BKe%2BRkDBCV6M17vEqy36tb3wqCJumxogIhFD%2B6SC3HKks%2FleTRx7JxyHYxnKO7WJ2RdN35MS5CAxnhX3K5aIJz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d23a203181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4109,"size_decoded":1959,"mime_type":"text/css","magic":"ASCII text, with very long lines (4108)","md5":"92a8894d470f5e66275463645e32f896","sha1":"9b226e42b300224dae7eaff8573e7483e4fd9809","sha256":"203a79701cb29ffcc2fbee3d8ea4cc49e4620c91940b7b5480807b2cfaa1c4ca","sha512":"cf9ab5bfc45d6e8bcfd1ef67efe97d72148e503fa19a0e8a5aeb35c345ee4d7283ecd08f195fb21790ba7214bcfff234066878f007cd767d3533b9b073f72314","ssdeep":"48:/yG5BGEetSEk83fY/0c2wen2DVX9M6b5eombtWYgbZcJ5MQPeJ5BeJL:uE6w83fzc212Dd9nbTiUYgF3j4","tlshash":"0781edf672d8603c343bf5b36998468e2318f39bcd936687f490612449c3bf229384c9","first_seen":"2026-06-28T13:42:53.942211Z","last_seen":"2026-07-12T22:10:39.097005Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exchange.coinbase.com/products/BTC-USD/candles?granularity=60","fqdn":"api.exchange.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.151.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.807Z","timestamp":1783883415807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchange.coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 02:32:19 GMT","end":"Sat, 15 Aug 2026 03:32:17 GMT"},"fingerprint":{"sha1":"CE:B7:13:1E:FB:42:F6:14:A2:15:C9:96:F0:60:E1:0D:1B:F7:B3:2B","sha256":"0B:40:05:98:2F:6B:9D:BE:AD:5D:DB:B1:C9:F3:E9:E6:5A:E9:79:B5:77:3E:5E:90:B5:2E:6E:ED:B9:7F:EC:7E"}}},"request":{"raw":"GET /products/BTC-USD/candles?granularity=60 HTTP/1.1\r\nHost: api.exchange.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nOrigin: https://heotox.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:10:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Accept, cb-session, cb-fp, cb-form-factor\r\naccess-control-allow-methods: GET,POST,DELETE,PUT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: cb-before, cb-after, cb-gdpr\r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\netag: W/\"1d4a-LTofCvD3gxmZGNQin6qIKGXti4o\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: EXPIRED\r\nset-cookie: __cf_bm=3qBfgvzxbhG3u1mLD.yQNvUSEKMuXj45Z9hPHf0KctM-1783883422.4478738-1.0.1.1-Hs2IWr.XYu.0rkoojyYVKghGnoSKqOBIQBXM3j_FaD0Rhq7qDd6VmlcEXTUVDMC79ucBOaSZaW6S3KyxLjNdh2O.sRnyB0XfiZo5FifWqy.2Epxuf3L5Flb8I.jfSkrn; HttpOnly; SameSite=None; Secure; Path=/; Domain=exchange.coinbase.com; Expires=Sun, 12 Jul 2026 19:40:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEJjSmKkbMsQIzT%2B0xebHmlon75c%2Bom%2FdnJ3tMrWkI9iP1H4CNU3XxOjSlrCosI9YL7953o%2FwErI0AAvK6FpregCU3t0aSw9XSvjnNYqwgEj9XvSw58FcYEqLwKDQ2xrX%2FrYGVmZSs2SF5s%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1a258fe4cada0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20569,"size_decoded":9009,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8a0a3a247d98685d647cd5f42f6406f0","sha1":"66d233c920041d394aa34725141d0e118698445c","sha256":"3e673073575c3e4ef47e410c9e8b1748f5e5889c24fd03d340149db732c75785","sha512":"87b812c2b48c87de5a636c41ca47178be907a5b5eaad00e47dedab04e6fc542bf1ebd082d0ee7ae71c860021ec0bd3527ec8e1107a9404cb8ff00769b4626e74","ssdeep":"384:kVHcgFuuHu9DfsqvbBjR/psJjDZ7ayAHpEiuv7Oa6:kzrwlj/sJjl7arpFuX6","tlshash":"d192e0cb2bf034cafc6449ae81e56060d87fb87b41d58ae0831b76769b1f56c1da4e34","first_seen":"2026-07-12T19:10:59.632283Z","last_seen":"2026-07-12T19:10:59.632283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6818,"timings":{"blocked":-1,"dns":7,"connect":3,"send":0,"wait":178,"receive":0,"ssl":6629},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-charts-BqNOPzd1.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.737Z","timestamp":1783883414737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-charts-BqNOPzd1.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1aa13\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8tjZSykU%2BRijfCAiQIP%2Bgi2MAupA%2BTCq6zy2i8TZNW2HxLTA7FcUywgAnlvJnxLPftjJW8c84qaWmhe8%2F3271TXXP%2FFp4XArsaV%2FUdk05NvN%2FPMIC8AZwEVraDe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18ee3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109075\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326310,"size_decoded":109904,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d64065a3b6a025dc18d2fdcf5e7e0758","sha1":"e875f5f8a2f4e67852285658ab6a54a08241b3ce","sha256":"e6499658c769700369ce1fd94480912a57120ac7662266627e073fa844486caf","sha512":"8411c763cb8d3b9f9a96d513fee6629d9559656b425af4ea0199d2535c35550dc426320708a1488e70fa4d8c3a8399abfa7b7d868aea67cdbd44a33141f68703","ssdeep":"6144:qAi7R/BEaFcnmh6IYB1HDctKHcgc6pKgXA75i0vx3sN4ZvqWnWFOve+4PujwSNDG:MZEainmh6IYB1HDctdgc6pKgXA7w0psT","tlshash":"a064f7d57396b06243e196ea18360002f3257984394788acf5bc5cdb3d6a94a72fff78","first_seen":"2026-07-11T14:32:36.340942Z","last_seen":"2026-07-12T22:10:39.113609Z","times_seen":4,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkLayout-D2A-GwN6.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.742Z","timestamp":1783883414742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkLayout-D2A-GwN6.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-8a4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CK2yuNLwb%2B8T0nx5M4WoAGjlz%2FHJuQwBs%2FD5YOvpWoInCRBNAsNv8Q362xmos8M3YE6xUQiITMzmepHSHvTQnbDYwDe5x90YFoJvCA4jviriGXZQ628oZBpH5qdn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28f73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4879,"size_decoded":3029,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4863)","md5":"1b6288f0bfbd6c21adcf9d674c13eee8","sha1":"d51ebae2dbd343bcf186ebc36467cba7cb9caa79","sha256":"3452c48fb51dda3dc59bca6b267781eb18dd75f27c334f0b9adcb24462187c6a","sha512":"2c82cbbe347d899e3f52bcd1304fe2636ac27cbdb338d71301c9ec27258c89b2639d7943156592d1d8bf8ec18ef4a31887741f3e970c278d64cc24868b9f3e01","ssdeep":"96:qHhbuWVGmDjy/PpBBQLY5mejE91pHY3UfLhpVWVX2VxVMuUlDcs4L1W1pD6zdV:kkhBee763VaTlQs4L1W1pD6zdV","tlshash":"9da1b58af55660b605b789e4d28776b9e13d233e6545c1b1e3ef0a382b70d97c06b822","first_seen":"2026-07-12T19:10:59.63508Z","last_seen":"2026-07-12T22:10:39.087757Z","times_seen":3,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/livePrices-DCrIK8eH.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.747Z","timestamp":1783883414747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/livePrices-DCrIK8eH.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-3ec\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CyPC8O7Avu9JBr0I%2FTmzqJDePCzuvP%2FksxllieFVV61ngOX282FGc0IVdmLuwM0BcJIPStHYwKzy7SMITij3SFqhFFclM2u5c1aotaMQ9zS9%2F8y8X8LPInJVfK0r\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce28fd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1004,"size_decoded":1307,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1003)","md5":"064dd85b4c1d72cdbc0ea9a904c94511","sha1":"4da1bf13850e30959c7146770048ec15cd379da3","sha256":"232c4a6f67b6e91bcf8045bbe0e2452765dee5e984f0e5c3636a1ebe83b8f2c7","sha512":"34bd4fe1971213bfac2ce33d38d404fda77b65460c9dff7d6036181e8e5ce025aa4df1e61842a290273043e3f2c9b18caf0836927eb0aa8ce5afcbb74e61bb51","ssdeep":"","tlshash":"e1110e983490b85043a0a99a837b52157051267276a8c1e161bf19aabd3a23fd937f2f","first_seen":"2026-07-11T14:32:36.344079Z","last_seen":"2026-07-12T22:10:39.109591Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HowItWorksModal-Vl_X5AzX.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.711Z","timestamp":1783883414711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HowItWorksModal-Vl_X5AzX.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-35b\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NJG5Ub410jb4tipiMybYCBle1GoKSfm8FuPFAgDvpEXyzy97%2F%2FQGIjuhOkNwkCq4NH27TqC43ir7z1bRa8c4s6LpwEitQi2bRiPbI580gMJL%2BOZcu%2BNSL%2BVfmTq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2343,"size_decoded":1650,"mime_type":"text/css","magic":"ASCII text, with very long lines (2342)","md5":"98f403603b6ba74d8314a6797380420e","sha1":"5d1220daa27f8a2f20bc2f2e5b58c2322845bdf4","sha256":"e7e9a7cb0558afdf0a49d8df8966a84000fb31fcea04f407d21e9929ee490bec","sha512":"faf467745c7fcd2543ddc66224f350b94ba24ccb05a7b350a2980d46439c2da447f5559314901919bb11cfe53ee98da62ce85489b56ba6864e5d9937a4bc0aa0","ssdeep":"","tlshash":"d6414260f689702cb03bd13638e5056f21ece307e7920bbdaa91761245db7861f3bd86","first_seen":"2026-06-28T13:42:53.983932Z","last_seen":"2026-07-12T22:10:39.090729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SearchDropdown-pd5yFy_4.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.765Z","timestamp":1783883414765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SearchDropdown-pd5yFy_4.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-570\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ydripx5w6uwIGRINdO%2F1%2B0oeS6mrO2msIfeboRSmVQ0zq0dq25wdR9hEZqglcljCQqLhL7SBW%2BZU%2Bh2rAErmnMkpDQuvJxZyGIl5sq5q%2FEg%2FHuwUX3iUuymGT4%2B%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce491a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3062,"size_decoded":2219,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3061)","md5":"afdfebfb404857f7350a33fd6296b656","sha1":"2d4063f9ae77a3e4b00489eb4eeda4fff51f679f","sha256":"863ae611791a7630ce05eed876282dcdc32b6ecbd091696fb80c4f144d5b4112","sha512":"965b6542d951169b231232cdd9dd11178dad914fca286bf4b84f088aaf79fd34e7c3f07c0a3bf3ccc00beebfe36310282d484ff84d4a78570c50768431b20b66","ssdeep":"","tlshash":"d151c66ca043ecbe42b39241e009b0a479692f62f98646d653fecc352359c39bd39f84","first_seen":"2026-07-11T14:32:36.299366Z","last_seen":"2026-07-12T22:10:39.120983Z","times_seen":4,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SupportChatWidget-CRo2HmSq.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.776Z","timestamp":1783883414776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SupportChatWidget-CRo2HmSq.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-14f8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4PtW0l1UrPnNsRE8LLNBwaNF7EeciYMPSod%2BoLJNeLgxpG%2FKpttt9o%2BL6sAXzq1PPcGsdxFPNeiByFUnYc2AjiI1LL48M0ecs5JXfk4PTxGiE0%2FId%2FqJC4nbHPx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce59223181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14033,"size_decoded":6192,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14028)","md5":"02b79105d74fb62f9d056044017e6ed4","sha1":"afa67d17e1c3ae6d533af5d162991c0f01ef224a","sha256":"40b62805365394914474688be75e4fc4aa9bc82af3099d3a60358243618fd061","sha512":"26788df729d2a4a10c2b4084eeebd5778d4a2de47c288ecbba5f1de75224568478d2151d53c66e4c7fa0c640b4837df3b078ba9e8bf47cde393316431cade218","ssdeep":"384:FYQUsWJhdijl9oVDiFGYwv3BBJYPPjRpbs5ur7:mUmhdiZqhi/wxBJg4G7","tlshash":"54520a487a16707dc37360ee53a561053329272ab549c0f174fe8e6922a5d2bb137bac","first_seen":"2026-07-11T14:32:36.339146Z","last_seen":"2026-07-12T22:10:39.075451Z","times_seen":4,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=instrument-sans:400,500,600\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.992Z","timestamp":1783883414992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 07:03:25 GMT","end":"Thu, 01 Oct 2026 07:03:24 GMT"},"fingerprint":{"sha1":"2F:C2:E6:03:F2:78:44:D6:05:62:87:B9:36:FE:75:1D:F2:43:DB:4C","sha256":"10:E3:7E:D7:0D:2E:7C:1E:3F:83:88:4D:0A:FA:08:F0:89:EB:5A:82:2F:A2:FC:C0:B3:BF:31:05:EE:A9:AB:50"}}},"request":{"raw":"GET /css?family=instrument-sans:400,500,600\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/25/2026 10:46:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d7f501b61fb0806ce5fc948a408216c6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3348,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f393b0c9a25f6a65f980d854630f7cec","sha1":"5a2f91cf3637b805eab535e441b0ca545570794e","sha256":"7b076f8a79843db0d5c0270c58d893e02788d4e86ef45989b950fbe928d716f4","sha512":"42a51cf47daa28ee92562ac99db452b17cfb6e96d15a97d0d7f686e1bf81f47310e59ade7a7cdb589a20ddd96b343798f008306798b971d3b7a2a60a193ba01f","ssdeep":"","tlshash":"6c619bf1445b3604df831d2222e7de231d1ed122f045a85a9e3638d48ea8d3957f3b5d","first_seen":"2025-10-01T09:53:53.133083Z","last_seen":"2026-07-12T22:10:39.147657Z","times_seen":21,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":20,"connect":10,"send":0,"wait":2,"receive":-1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/wta-logo-41f331bdf1.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.238Z","timestamp":1783883415238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /wta-logo-41f331bdf1.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: L8IpnVVo/eOimpLVr/y01d03fgFleVukyq1ZmJsd5ci3bzp0DGuO7LRmvgGNlLCm2SG36ixrFVs=\r\nx-amz-request-id: 2AWAPA0D53GDGCP2\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Fri, 19 Sep 2025 02:24:38 GMT\r\nETag: \"ff1eb8128e6873c028ece0aae6fbe7b2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: MQFv5aFi6YSEJJZ37STmEU.7u8qdu0TP\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 6092\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6092,"size_decoded":6567,"mime_type":"image/png","magic":"PNG image data, 258 x 195, 8-bit colormap, non-interlaced","md5":"ff1eb8128e6873c028ece0aae6fbe7b2","sha1":"7476298c4e3098a923ae4afad856f2dd902d1a67","sha256":"53bb3d9f1c7fef301d57f0c44100cf3ccb45fd41eb86d263d5b3b7ba5baea23e","sha512":"533720c978815ace7ad1add12e5ef4444df0228caf096aad4d66f316eb1989889b3eb1f693ea6e7474990e887cb3f46415c70d4980adf92e240e5ea7ef8dfd0a","ssdeep":"96:ES84dtIXC5vC6c8FVJfHse82LA6wsMpbDOg4X8NauuxS4lTMU41woBbAGB+RG69U:EHsy6C6Vse82TIfOpBtD46G+RhF8","tlshash":"20c18ead5eba9093ad34751ffbe9a3a07ff421d3d9e0004a6e1608a17dec201845f947","first_seen":"2026-05-06T23:39:03.728316Z","last_seen":"2026-07-12T22:10:39.131219Z","times_seen":10,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":4,"connect":108,"send":0,"wait":132,"receive":0,"ssl":682},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/assets/images/logo.png","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:16.800Z","timestamp":1783883416800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 11 Jul 2026 12:31:27 GMT\r\npriority: u=6,i=?0\r\netag: \"6a52379f-38253\"\r\nexpires: Tue, 11 Aug 2026 19:10:15 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BoHLAyBgpSyWNKnrj7KoZw4Pfvtar%2FAUdXx8k5QRehW4vJEshoQStUQxRTPPO1OkTJyq6qT4l8a2umStuYjlHIBOZlYLL1dFBSyqtOyP%2F7mrz0I2FZ%2BfTHFMbWq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258db0b943181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 229971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229971,"size_decoded":230714,"mime_type":"image/png","magic":"PNG image data, 411 x 489, 8-bit/color RGBA, non-interlaced","md5":"c11561c52ea2d9c997e4a66e1ccb8d1d","sha1":"eda01c99ab6318e23b43285e38431ee0766f35e7","sha256":"fe5df8df4fb624d64664c1813a1c64ed7a54594f7f6f6b3254006299345c26a6","sha512":"19693b3432202003760072a55c6af6b323d1fca60bf1bccc6502e54d81c8d67ac444ff384c9b92bea7582638c8c6acccdc74ac8227b649634a45c9b5d8edae60","ssdeep":"6144:JnlZCkyzK7z4fobuLcwzhM/KkomLAd6FkcLH6:3YzK7r6LRM/KymBeH6","tlshash":"f42423edea9f0df392cd79a259536a83b1bd34f7510ae376ed9813334d46c20a5620e0","first_seen":"2026-07-10T10:24:44.85414Z","last_seen":"2026-07-12T22:10:39.103267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/app-9urWGCDo.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.731Z","timestamp":1783883414731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/app-9urWGCDo.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-14567\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqH33kaWogKETfMVka5%2BbvjHOowXa%2FANONfC685AyZgu6emtjoxxiqdnVL5oIXI5S7N7%2BZgRtySPCv1snpoNO4pTmV5eEhPPeuUNW0N0SHuVkf%2Fgd%2FaqoIxaqpmw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18e73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 83303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280970,"size_decoded":84127,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (26793)","md5":"527d838a826d1209d84765305b77724b","sha1":"d2be4c9985ea37a2c062006d29ac6be6e11aac2b","sha256":"42ac875cca7568bee2bc51513a15b1f4be2616ea9e361a703dd4d805869c3f92","sha512":"d7249b2deee6b6615b20ec5722e9460b7af71e5e1ecb9139a17fb5778aa8ab1c7f0ed5ac46515fd73f9c0516493b8f7458d111cce346efbbc3a51a2a14e34d3e","ssdeep":"6144:bMfimheMDSR5msDJqr6k2k0L8VSCH1KSzUTr9JhQWQKZWKW7WkBJODt0PS:bCheMDImsgukfSCH1KeUH9JhQWQKZWKZ","tlshash":"3c54d724064c24ed114aea4efc48ae0938fd55beaee3c2551db54d3e30f2568d33eb69","first_seen":"2026-07-12T19:10:59.657456Z","last_seen":"2026-07-12T22:10:39.107673Z","times_seen":3,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-Bensp44_.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.732Z","timestamp":1783883414732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-Bensp44_.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-4079c\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wc%2F5yZd34uXueAnTDAvmZ8KwN3yBy2e51%2Bfq1UahqCFl18xBeg%2Fn4u6xYSNUv%2FOOn1PsSQYWYIa8D5u3i%2FrP11BWYfp9o%2FaY%2FflAM8vwz9v1DWRcKC2BKe70qMtj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18e83181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 264092\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":841099,"size_decoded":264921,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32781)","md5":"9918650b3043666dc16788c48e73bb3e","sha1":"dd913577665982310fd137c3d7acbc7447fc7455","sha256":"9e6b4bb6192c3a40bff0606a4ec69253da192b07f243687dddcded30bdfd4e9e","sha512":"097e256bf032ba8e17ce851542ae89d5affc9489f33ecabe2a2a6130820502069bc71e0908b9e6e1edcae402d99c616048791f8f8ad138f4cfc00298871b3c53","ssdeep":"24576:af+FUMFUfLnTByNnALB8Vyqkqik/QQ+QS0ze1OGz+bm7:aWFUMFUfLnTByNnALB8Vbkqik/QQ+QSN","tlshash":"d90539d472ca707657ea45d9507b0500f23e9a58b40d8098f26cddfb3ea6941a2bbf3c","first_seen":"2026-07-11T14:32:36.311651Z","last_seen":"2026-07-12T22:10:39.086636Z","times_seen":4,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.996Z","timestamp":1783883414996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Thu, 16 Jul 2026 19:10:15 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":24021,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-07-13T09:54:07.611309Z","times_seen":2667,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":2,"connect":22,"send":0,"wait":43,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/will-kevin-warsh-be-confirmed-as-fed-chair-6WvZbB09aNsG.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.249Z","timestamp":1783883415249,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /will-kevin-warsh-be-confirmed-as-fed-chair-6WvZbB09aNsG.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: aiLyF/v+jwRWQ2USVCM6UzbTDRvCIBrC4QuGbAtyiDyU6fRjTuqAjfR/Ju8EsdTMmt5Mi9llpS0=\r\nx-amz-request-id: 2AW691ADZKAVKKZJ\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Wed, 04 Mar 2026 18:35:11 GMT\r\nETag: \"c57fdb9fb411e685c916bd8b956ca50b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: K47CERPWstiS6H5.VmKmDRlL.F_hnXki\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 6041\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6041,"size_decoded":6517,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 176x201, components 3","md5":"c57fdb9fb411e685c916bd8b956ca50b","sha1":"e6014065b7ce3f348481aee39bbe5565e310cb0a","sha256":"bd5770095f9e9f5f67ce1a58d57e4428cf0b7fb493b45c1fef4fafa61c5097e0","sha512":"4f659a05b45b0a8b0de38b2ce0b431a0194986365390e0df978ff36531a84826f47664c274c599541b1f0b4dd6c7d65ede8e5f0ee5d257d82005613fc2d6923d","ssdeep":"96:lamabKhIdoHH8yt+F0F+wDDiNNk/tAWsIhmaUqKroMQT+LbRJKP1asXqWnkbVExJ:lzLIgHn+F0F+dbkWv8dUqKrNPEd/heVy","tlshash":"07c18e04429d445d9feea0ff2a9849a679423ccbde048c9513fcc1e5d575eee4608e4b","first_seen":"2026-06-28T13:42:53.959316Z","last_seen":"2026-07-12T20:48:05.873768Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":1022,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useEventSearch-DN3p4Hwm.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.758Z","timestamp":1783883414758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/useEventSearch-DN3p4Hwm.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-29c\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SKF%2BgFfUIxmZkSk4OjfNA1HojJdZXe23cjlTYCXqIr1tZFd1Jv5Z55AyGhQUS%2FDpBD2h7MhNxi1luvJ8aVagIiPJ%2FlQUz90fE1QVQGhZxUzdksP3b6ICLqIPuBPo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce39103181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1160,"size_decoded":1484,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1159)","md5":"a255f2f97e95b2451abe932280306248","sha1":"97f3262c06bed3ac6d4aebd0f319ead0db3f9214","sha256":"a8e78332c092eb4208b6f90aee2669deaaf87e610e779cb7ddb3d74c26b76cf7","sha512":"4810deb0f0b3e59f69acd2b3f0d787e77d6a2762df422d03b0d3925bd0ecd1d7184bf8e3af74f9290fa6551b45bd546ef5be1d88672b3b6f9eda6b1802a9c1cd","ssdeep":"","tlshash":"242111a870c7b2a043f01ce98262e888a26907443495c4d0a06e5d86267ed7aaf03e69","first_seen":"2026-07-11T14:32:36.303718Z","last_seen":"2026-07-12T22:10:39.128458Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkModal-DLe5wved.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.386Z","timestamp":1783883415386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkModal-DLe5wved.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-342\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKDK%2BQ3mKmo%2BLzWMU000T4OddX%2Bd1C1%2FfJ2MXpm%2F155nE4s%2FApJ3AZsE1XB9ew1ovQh%2F8SO0B0HvjQ93cTe2FbekpRka55AIs7EansJ3lXZYfendv0ZaKbzFvz3o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d22a1b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2637,"size_decoded":1636,"mime_type":"text/css","magic":"ASCII text, with very long lines (2636)","md5":"162e994bc4301a12419049f2ca2f6b0a","sha1":"014440ab3caec4706aa13bd125a80b78b3194baa","sha256":"3fe355b988ef8609bddd36df14df3c6b5413c5f24aaf4d9944fb9c0bbe7a08ea","sha512":"e9d0db620c52eef90bd4eca0dbba7fadd0f75efa560f96a6ee310dea5fe362a4c54a241690d07fb81d09b3b7a491d27d08382536bf51cb802da62a2eec057d2c","ssdeep":"","tlshash":"5b51ca47bdad50fa782fd10b7895ce8c831dea47c93e2ccaa837512909d73d518a11d7","first_seen":"2026-06-28T13:42:53.99273Z","last_seen":"2026-07-12T22:10:39.102499Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkInput-1lYlWzru.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.697Z","timestamp":1783883414697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkInput-1lYlWzru.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-208\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mLSAvGGtf8f%2Bmt7NyWL7iMxBVGxAuVhJ42GcofKfJYI%2FpA7C5Ye51jDazY8FOR15O1CHGHW3IYJX7oPMrqdLAlVSDHtqxSE%2B5umodDc8PbU5CKLTWasE10anRPFy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdd8c53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":1307,"mime_type":"text/css","magic":"ASCII text, with very long lines (1509)","md5":"2187b3913d978e410f80b6a99c9c7553","sha1":"ca7de8844d495d29cdf9eba1ec17203b7e933f63","sha256":"b3677d9ec8d148fb3bca1ea696649fc1a46dd887d9a68e0a235ce432c9469a63","sha512":"c0e5bf4dc9ccfce8694a8576b4fa84b4d134d80d727a197603107d961f45703b6530c41c32c8fb6db9b30968adddd32ec00f242c83276c251d26413dd53fe434","ssdeep":"","tlshash":"aa316b53336873693837d87722f8c1566110a64b9726c3a5dde090394aa76e12f36ff8","first_seen":"2026-06-28T13:42:53.976772Z","last_seen":"2026-07-12T22:10:39.093523Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveActivityFeed-XHp5su5e.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.740Z","timestamp":1783883414740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveActivityFeed-XHp5su5e.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-46f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikV9xhVr1BfJ2OSpBKLEWUj02pM5ELxOZ12QBmAF1ftE1FFhgIZdsBcQqkTq4uDkYnDJAUQ7lBz7fIDpddGUD%2FJtxiUttoJ70jlcLWdN9nD38VO4awECHB8ja3xG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28f43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1135\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":1948,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2138)","md5":"dea9a7215a030762c29f413a42f9a683","sha1":"ce819c5c19153856cb655dd3bdf8a5482e892de9","sha256":"9f57a127dace8a251e4c82ee00b81a5336c76103649b9a74d9e4f3d162c1a47e","sha512":"f2daf19363ab712a64079ce54c1d11038aa9420db20ff2f6b3b24bb4d6b8cfcf4e7bc2ba5449a7d25fbf50bdff9147efc3b313b2fdbc9ab9b181cef27e51014e","ssdeep":"","tlshash":"6d41b2887b0ddcb902e3a012d4ed70d00018bad6a6d80605d1fbc8063f32934e20ee7a","first_seen":"2026-07-11T14:32:36.285756Z","last_seen":"2026-07-12T22:10:39.158883Z","times_seen":4,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useEnabledLocales-CCmqlSZB.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.761Z","timestamp":1783883414761,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/useEnabledLocales-CCmqlSZB.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-188\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBZrQ6ciZszDZ6zrQTZlZ7LVB2ziAQ9MhlNfe35J6DjiX6YFytw5oW1lixtl%2FqK1tQP0C%2FDND55IzY7%2Fu9KYsIsOvGVhdLA%2FnZMW9Ga3EH9umCPTKZtuSPQlmP08\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce49143181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392,"size_decoded":1039,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (391)","md5":"3d3d3bc8a6f9084db9dde2d6c8b31697","sha1":"825778457e01d67e774c9ae98defbee2ae643f83","sha256":"53f8317f97bc7008336cd1c7c4a961b874ca3fa4463a500310b2c2f4925f2f67","sha512":"551281ab9dc129a39740926ef2d8cb574454f1c892d4fb6f35ec470040575c5814232259e7ce1a49ea42783b7e5ecd3b64f1b54406976ef5b9e1328b2e29a06b","ssdeep":"","tlshash":"26e0614db4a630f1c35124d0d0bb45b697349908361aedd1b04f09a56d621ddc35bd1f","first_seen":"2026-07-12T19:10:59.671444Z","last_seen":"2026-07-12T22:10:39.110767Z","times_seen":3,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/Repetitive-markets/MLB.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.246Z","timestamp":1783883415246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /Repetitive-markets/MLB.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: kg3RmcPQ+Lru2MwPWAovdTBetObAM3ezfZgJ5oiMa/UR2082UqRnMPVR3CCGmrNryUm0i+7vDzg=\r\nx-amz-request-id: 2AW81JXNXHXD3ND3\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Sun, 10 Apr 2022 16:42:53 GMT\r\nETag: \"244f96d51d4d7914b79ee01e618b90b4\"\r\nx-amz-version-id: uEOceEcUL_v37YDIIykFWyQVF0Bygp9v\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28898\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28898,"size_decoded":29309,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 354x354, segment length 16, baseline, precision 8, 1024x628, components 3","md5":"244f96d51d4d7914b79ee01e618b90b4","sha1":"b0202ed80419d48df660000453167052794656cb","sha256":"ea76c3abdf320fafd526d89fac2c24b8596310913d3c16ba957c2edbf05bf2b5","sha512":"241bf16347f4225fe1966d90f0f9ec8521c4e6363d8547899b745d1589baecfd54fd0b0b1079b9c1267ca5f0e8fc15f8e7971245bae3be4ac48ddc4e2b87e43e","ssdeep":"768:I0mToGWWtrF8QfQN+1pi4OBeplphRHZFirPatoxxi8486Xixixixixiu:k1o2pl9TtS0Vixixixixiu","tlshash":"abd2bf050c10c846d4287bb6917e88a6e705b0e49d81195fc5eef7b24f79b7a940ff36","first_seen":"2026-04-10T18:35:09.801122Z","last_seen":"2026-07-12T22:10:39.080512Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1262,"timings":{"blocked":916,"dns":0,"connect":0,"send":0,"wait":131,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketCard-CwYgn7yM.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.416Z","timestamp":1783883415416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketCard-CwYgn7yM.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-79a\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoXLDvX0Is0UU%2FQHH5%2FXPXM39tZEaVGM%2BFaR2Djy%2FmZxvGsNRFpqJBzReocZsFEamGgx3GR%2FdmZDkfDNY88%2FhTsGOWqzajUlV5vC%2Bl9EIsiqBJwOod%2FKfpEU0SEh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a2f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8951,"size_decoded":2751,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (8949)","md5":"81160d1ecb7d9b23223f3dcf45d4d8ac","sha1":"c46c7d3a04af9c50637ce774e4cbc309458b24bf","sha256":"46605b63349b8a43d9b0ec33aecdfce9108ae1e58e5500e48f59589dd1afdab4","sha512":"5b320d0e2b9fa577bc03f46fb51c7d0699e3c80396e6f2e2b78c7883c075810a6c59c72ba682c7969b9812c68948603d9abe2dbed29726675b956e2896560e4d","ssdeep":"96:HEDZY9nqM2LcwvJnfCjSY828qtQn/SnDPyM:Hd9CLLfO82V+nU/","tlshash":"2d02f161710f5138e43bde339489170ea00cee4bc63b8eb6a543611e8de779b395368d","first_seen":"2026-06-28T13:42:53.937914Z","last_seen":"2026-07-12T22:10:39.152197Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketFilters-BdbLFMVQ.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.419Z","timestamp":1783883415419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketFilters-BdbLFMVQ.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-36d\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2h0X1F3EIShwd%2BGWTgboaXoBP6GnoBrTYq6ic7RZmraQeItcq%2FcTG1hCmQON2pV2GjzMV%2B5hf3cIy0I9YYKT9P%2B3qOOR1LUh0blYuHpi00Q10xF%2B%2BfrU5OgYuZjS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a333181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 877\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2819,"size_decoded":1677,"mime_type":"text/css","magic":"ASCII text, with very long lines (2818)","md5":"a123ad328dc9ff598e9515fffde478e5","sha1":"f42bbcf2ed8e4b9b17b9b3777221a33b6271086d","sha256":"4a931b0b0305117e70ad0b90663f06830d5a12c68a7e213389f5715bc9068318","sha512":"3841d1a788df5584d7881e7ff96af664de780adf4be5fcaf81cac6349e8e2aed9dc7a0350e7cdb1651f15b282ddc714b6aced0eca19136d22a6cdea71f031e82","ssdeep":"","tlshash":"8f51e2d4b7d9e01d7423d1651bc60f49117ca383daf22bfbb15668230483ad63bb1ac5","first_seen":"2026-06-28T13:42:53.939786Z","last_seen":"2026-07-12T22:10:39.117567Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketCard-HscHskKU.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.744Z","timestamp":1783883414744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketCard-HscHskKU.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-d01\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cG1WAdvr28RDFdiYb0GGLUBrDovi6gRfuFqFHvt%2FIRDtOy72BrsFFA4EJs%2FvLgaZS5TGyHPUJ%2F4cQAIVnaO%2F1uYXZo9vcuzMhYXu7mh4aC7E3H8GpJxPH%2Bv5AfqH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28f93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3329\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8899,"size_decoded":4150,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (8888)","md5":"4714c2fb565ac7c09859b702c9be02eb","sha1":"715ccbedc2e530c94f64a3515eb2dc84f9a93706","sha256":"5055f745fd7642fca70f5101c49e3426303fd9b9ae1a0ed224548da31bb4edf7","sha512":"9f389ba1f5079e5530488ae2e3c21c2590181a34de5b9e3b8cf56824b28e3dedf2d41b6254a2566b8e1e9d32b6f56070af5aa985fa7bf9a3d0dcce229deb8222","ssdeep":"192:PWHDroDvwfInC2Gh/qibenKxXsEoEfIqC4NY33YRqcc4Ah+K3BGN3Rf42:SDrIwfInCN/qiben+88gqhNY3Sqcc4A8","tlshash":"5f029405bc1fce3993b61f17809822c8386a6fc4935b52e7d1f94c687a71e25286ed3d","first_seen":"2026-07-11T14:32:36.31624Z","last_seen":"2026-07-12T22:10:39.094318Z","times_seen":4,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/DepositModal-DX0fUzdD.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.749Z","timestamp":1783883414749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/DepositModal-DX0fUzdD.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-dbf\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4YtqYhrllA3IkkDBAdLXXs3zNPnotH%2FKSIraRMLlpot0Vud9CqyKcZ9RDhl3eqFz0Rom2WDXJOGT67QCfv2znHwbLombsC3Yj3yU%2BOELd3E6ilTp54M6z5JqB%2BRF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce29033181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3519\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9728,"size_decoded":4336,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9723)","md5":"68e1e047fc35fcb8cea775b6c59e81e5","sha1":"b069a094ab506bea00321f99c14a07eb4307835c","sha256":"f14db5277549c56dc68a3afd028fea644f93a374c031d156db87aaee49ed1165","sha512":"d498347466a77cd79ed3aae02f249b451d910ad1127a6ba57e4a20a1f7ab83ea7df667e2b30bcf564f15d9512b9b6611de5519e530120bc39cca455e08772dbc","ssdeep":"192:8CwPIo9jpZLew7plWTE22nh6x29RBmxxX8VsbI6NsEDJQeG12+:8FQoTMw+Td2nh6WmxxX8sI6NsWWzH","tlshash":"1012a64abced69348377809260560c2db44a2f95c4265ce7dbfccc621fe5c366a2d939","first_seen":"2026-07-11T14:32:36.256417Z","last_seen":"2026-07-12T22:10:39.07416Z","times_seen":4,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/liveBalance-IF-5Ff7C.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.768Z","timestamp":1783883414768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/liveBalance-IF-5Ff7C.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2dd\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0cGuYr8jmn5SotmrfLI%2FEJo%2Fgaz4Jkik%2FU983EMam68Wca8qF%2Bz5FG4qkrhd69fhhI%2B2mDKMwm0KelsO3BDyNLu%2B3N0e8p2BitwaUbWT34D9kSo4rZT0KYW5z0HU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce491d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 733\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1656,"size_decoded":1555,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1655)","md5":"31e78eb5453dcdd7384925965292e246","sha1":"7bb1e10b7e524fb975bf3ca16c177176806d1f83","sha256":"181e14d3ce3967a2bf74288942576945fcb878d640f6e9cb5e48755b7870e970","sha512":"4b9a0c75f8f96786b182f4754bdaee4232ff6a88317a7d987bf84c582967f2894a459081b7c3659bc5334950192f00a6646b15459e05a42903f496b43985a70b","ssdeep":"","tlshash":"393110dda978647252f95453525a7303342dbb3fd44a419a410b2f2867fa803b2b7f4c","first_seen":"2026-07-11T14:32:36.334073Z","last_seen":"2026-07-12T22:10:39.111825Z","times_seen":4,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveActivityFeed-C2Pnukrf.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.381Z","timestamp":1783883415381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveActivityFeed-C2Pnukrf.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-344\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ru1JOmj80yZOZJJNgUp3f2glmhk7AKDX25%2FmvJ5b2z8OqYLLFDPvdvmCxeRC4goK7ukB1wUOAoZrAcZEfgQpyQRvLB2GHAnp1iaSDSj9IgMD5rJL7XuIxQfBOi50\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d22a183181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2518,"size_decoded":1626,"mime_type":"text/css","magic":"ASCII text, with very long lines (2517)","md5":"468584749b7c8f0258e8b989ee920acb","sha1":"360a3f99073d28b9bd9c4633cb7e586e63e1c19c","sha256":"2575644631c7b76493563169fee0954d63fdeee592d7582727f9f7de9e1a0275","sha512":"53a45884d58f2861cbfd62db329d116b394b46067b5064906d444eaa2dacd83ef607ed2e1fa997cbf1a186fe8f665830998c9d0bd29a658462ad41d32cbeaec6","ssdeep":"","tlshash":"5451fd3273ac6138643fc83752cdae1d640ef62792174998dd82e624cef75431f26a99","first_seen":"2026-06-28T13:42:53.936072Z","last_seen":"2026-07-12T22:10:39.095369Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-bc31K948.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.689Z","timestamp":1783883414689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-bc31K948.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1b8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUEk%2FNf0Kp4ScYjZDxgv9%2Bi%2BpFn43rht1SfbCRwbhfsAFXqqvZo4hwsYKgB%2FTA9CGIAaf%2BJUcNOe6plofnmGefgxVmWj98imyXb0Xfa9UezWng%2FmHFnt8mkIu5GH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdc8bd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1327,"size_decoded":1235,"mime_type":"text/css","magic":"ASCII text, with very long lines (1326)","md5":"26c131fd4001e5b5a140f41d03b01872","sha1":"dc98bc33b583f063500f31543fc4a09d622b80f7","sha256":"5fe4c0a7843a028d8436e1df4d6176b5f9e80e2a13ef55fe38e9a7b64294108e","sha512":"57c941fb386876052b16763bcec3ce4a962dbc4b4da8f73076d4248a997985d789213f3802f4a6c8a264cea3d387358a45e9dc1ea42d155131d99171d2e5517f","ssdeep":"","tlshash":"25213904fa71145180860a83a9d4d6acc1fff6e3abb705a962856ace4e43ae5012f7d3","first_seen":"2026-06-28T13:42:53.872238Z","last_seen":"2026-07-12T22:10:39.089661Z","times_seen":7,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkButton-_wximxh8.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.708Z","timestamp":1783883414708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkButton-_wximxh8.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-1ff\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z74J9V9rH1mN%2B14xDzGNtznObIkS2cjSTNkFVDVFLzqxUsaEgc1VSKulZsMv74tkVpP17XvIDQYMp080S7Vr77aYA3K%2FG%2FJKIQfjCOz4ast05YLHo0lFXyf7cd8T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8cd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 511\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":1298,"mime_type":"text/css","magic":"ASCII text, with very long lines (1495)","md5":"f0cb5f28fa47ca09236d1b017d1157f7","sha1":"3b8384826fbb61607529b7bf35125fe8480a1df4","sha256":"88d8ab1c2e2a05938b9e8fea16ea990b11c35d435b13dcea8b6005ba90e65d92","sha512":"055701ac5529f0d7e13b4327ef1de3900ad2306d98ed8b0c9fae7c653e050f36b3a1b7d2cfe9580f3a913f7f3677e9b763cd26dd1505b980448304d2e78736d0","ssdeep":"","tlshash":"9131905f7a5d43ae3c3f905e01b4154a2615f943c6282b5fe11892f90fc37d166f62e0","first_seen":"2026-06-28T13:42:53.86823Z","last_seen":"2026-07-12T22:10:39.090163Z","times_seen":7,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LanguageSwitcher-BzD7FPJX.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.721Z","timestamp":1783883414721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LanguageSwitcher-BzD7FPJX.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-311\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXYgAtNmb8%2FTToHjDJzwkE4sigN4bz0MZrI68SiwcBHc0F4suDBu9uFDFuJTfsa2UuqeSWU4d3xMHKzCIqeZUujU30Aca3d389ry9Z2GEiCosdU%2B13JDD8zo2p7b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08de3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2360,"size_decoded":1570,"mime_type":"text/css","magic":"ASCII text, with very long lines (2359)","md5":"a55e718c30a922aa493cefa0baf687a5","sha1":"a4520dae8df06f8fd9ed0ca0e9008339db16fbae","sha256":"65d64ad7b83c09933425db56efe9a608f5f87a1fdff322a1ed85f8d8db76b8ec","sha512":"bc9600a7db9d9ac85fe3b25acd67f3fdaa7119b2af952951231b803ec659341bd77e588f2dccdc8ce08d2a1c386089aa75973fa656c5af780453b77a85c6df4e","ssdeep":"","tlshash":"6e41cf417e4c2f2db867d054e7ba1c4ad1156e87cd26298ebb89b1128cc37d93ce518c","first_seen":"2026-06-28T13:42:53.857158Z","last_seen":"2026-07-12T22:10:39.095978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileSearchOverlay-BR-EcC5J.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.757Z","timestamp":1783883414757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileSearchOverlay-BR-EcC5J.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-784\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qru8XDyrCk8XGf71gBiXaefa%2F4wKJgRCH3pW6H44%2FEEzQY5ARScwJ02akvSKmsCqlsFZ%2FTtDXWagR6Ogr4HWHTC5FymCntWD1jIypbEMkxq%2FYg%2BqEWp12Fl6z02Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce390f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4222,"size_decoded":2745,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4221)","md5":"47998ab091c823f4d4cd6250ca568ac4","sha1":"1b27b6530cd08b2b052925b41ecc54f5b79defc2","sha256":"0f71fcf98c049c7094ac650cf91d13a3ff93ed00b557dd53bf6cd2cf03f1ad08","sha512":"ee7bc5cb5fabaf2e474685410c637182b613f30d451aa0648082452b23d811ed9fe1ea5a62cc58afbcb1067b4d811c4d60a9b07da46c5e93bc2a9ee8c56aa829","ssdeep":"96:5FiObLVZYtf7iGi0wKndJFRnH5sAI4oAuz0xcRn50sEbdTTrxn:5FiObLYtf7iDRKnzFjy4onz0hrxn","tlshash":"8c91a63dbd079ebd42b742c5d01aa028381c1fdac046246191fd9d7826a9c37e76af9b","first_seen":"2026-07-11T14:32:36.336086Z","last_seen":"2026-07-12T22:10:39.140991Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Markets-BQmaCn00.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.729Z","timestamp":1783883414729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Markets-BQmaCn00.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-5bf\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3QantpxskRQfr1c0h659vSQzmQ7WYzjI99F9i1sKRASwhph7oOdvpy97umh9kAqHl87Aq8BfZf0IFve4JR2atEv7kyKG%2F22c%2FOha32zR2ggZ7Zv0jcs%2FEfYr2nB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e53181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1471\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6067,"size_decoded":2259,"mime_type":"text/css","magic":"ASCII text, with very long lines (6066)","md5":"366749b65110a6120c5e07ace91231e3","sha1":"1cd52d5f0bc652285c81b9219bc98f523aec18c8","sha256":"ce7a2b08c6952f74450cc3dc89f3026a7c3d9c03647772d004ebd4c461384afb","sha512":"27e7a8e5f5421e431a1dd2160854b00453fe72429337b36027211c7df65a7ddf04b53d978b9000926e11e1ac9add558e6cba0014a18a8f33571571a51d186983","ssdeep":"96:QQfaRYqUgP46xP49s9kgXqT3u33hkNANHnGxSm4cSmA2RPtl2ENW/Ot388Fr9wSY:FozjK/EGxSf3ENW/OqIe","tlshash":"05c1ced43365603ac0bbc314a5fc5b4a497fe343bfb60dbbe94914260883696297ad85","first_seen":"2026-07-10T10:24:44.836655Z","last_seen":"2026-07-12T22:10:39.132787Z","times_seen":6,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/DepositModal-Bm2HKEj9.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.387Z","timestamp":1783883415387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/DepositModal-Bm2HKEj9.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-63c\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJVtYiIO4bXWh02qgzBYaB0EuLCRAJmOtThD3kidLEYyU3AKvY8Z%2FhqVi7pLAQSgoY9F81ZzNUQAhNWF6VuCzrL9TCxD4Axn3lgEgvvl7U8PYNdIlxlZB5eJ5GgM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d22a1c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1596\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7563,"size_decoded":2387,"mime_type":"text/css","magic":"ASCII text, with very long lines (7562)","md5":"1ca29166539f03db4c4b30c9b0bd0f78","sha1":"d32b1c1b3fbfdd13090bc47de369e8890bc99c26","sha256":"0131a16166fedd041d0bdd9a1b30a02e3d9ee72e90b8e6041c2e8f0c4aaa4d9f","sha512":"dcc3e4cd7b72e8baff7bccb91812e20011efcc4380b512f108b8fe62ef746d4758610af625e17f2469f36b418a0cb864ec5e992c0a8d664ebb90ba67cfca43ae","ssdeep":"96:IAbREWlCqPqsVvM6xoFKrHV2Ki1sJ0wJMHTpxSFE8IIrlahnGWUbK677Fwl:jREuhqeAVaKTpxSFRIIZaMe6lu","tlshash":"65f1137574ac6239606fd3a3b5e4499f39417603d6239aa7ce30f2240cd7d922b38f94","first_seen":"2026-06-28T13:42:53.859445Z","last_seen":"2026-07-12T22:10:39.091558Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileBottomNav-CNXNJXo3.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.410Z","timestamp":1783883415410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileBottomNav-CNXNJXo3.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2a4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Fpj58hVQO1oGoUFgZSgr8g%2BuFjtAeZNzdjff7xlyLOu0eL9wpx1jUzMlksD3c8A4GOC32CYix0jkRrwIZJ7E9Ur1H2hf0l0JLEuYUk2AtqiV4tIJAs49nmOLC39\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d24a2b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1518,"size_decoded":1468,"mime_type":"text/css","magic":"ASCII text, with very long lines (1517)","md5":"8856115330a1fe19425662565970aaa4","sha1":"44b2a8866727d920e10ee193945b10abe9b6840b","sha256":"f14887cc27576c7ac1fe9fa99c650c07bd9075e4a2477b2916e26afd3500ca08","sha512":"1efbe3447b30e14d3b249d3ba8d1deb634bdeecba6552da35bb853dfecc265ecafd5f3372e4e9571d78f58343699c361bd0f0e7b1554b99edb6267ab4721ae93","ssdeep":"","tlshash":"1b31dba1a41d637d9663c5939cf0866c613eb783ee0b12e87a4a612448cb7f47ab7244","first_seen":"2026-06-28T13:42:53.986431Z","last_seen":"2026-07-12T22:10:39.072954Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkCheckbox-cR8QAYr4.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.418Z","timestamp":1783883415418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkCheckbox-cR8QAYr4.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-29f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wxr9GEyGgNsjoZKj6sX%2BsIxxau4PEXO%2FYdG25xQd%2F6UxndY%2Bi3KGkUDsNzlzdkIAFNus1JJ7a53yjvQHgdZjZrimEy%2BpN5uYF6TIbud32bXgXjpDigYDbcEH%2FWVS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a323181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1809,"size_decoded":1471,"mime_type":"text/css","magic":"ASCII text, with very long lines (1808)","md5":"9310255707e36092ea3beecfa8ea143f","sha1":"ef41948f538f6a8e748ae74284acee51bcfc519f","sha256":"7b43bbb07cbb40bee04b6e66ce0e4cde180be73926c077366fead1ec460879ea","sha512":"df2cfbf631487f8dbc9fc74178368cd68f61e24c27b46141ba4ba7139bddc90818e6c7ff78036c1dbbe2125f62bf052667d0e99f76af4d0223a8c4ff7f54a3fa","ssdeep":"","tlshash":"5b31e027b41ca1eaf427f01b3edc8d855108ef0bdd214796dbd5a50985c3ba9bf61284","first_seen":"2026-06-28T13:42:53.982183Z","last_seen":"2026-07-12T22:10:39.070889Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-clarity-ghQi_28l.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.812Z","timestamp":1783883415812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-clarity-ghQi_28l.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/build/assets/app-9urWGCDo.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-2ce\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:15 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CS2aeshHgH%2Bc1KTkhx1I02N4dwwC0%2Fso7zW5TfBaQCS9vKsBZKYzWXWpU7UY59kvWGnExS5lJkRioN5GT9AuCby4HeOsa5fOWHGFY4vfFlV8XPMRcBpRF%2BPc5uDp\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258d4da8a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":718,"size_decoded":1159,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (717)","md5":"b266508591b9712ed1b9d015e22f8cba","sha1":"6129961b31390b0c639b24acc1f830c58f584c6d","sha256":"91dd8434116ba89c523dd3c7f27d4364a11b466783613add9e254480400eddf9","sha512":"e3f9e955250e0cbb4544c7a6100ac340a382089277bd6d4b1d923f16e396e9f4a0645ab024fa318dc46ab983d98a65752fa12507f37ac63bc932c672d2dbd3c8","ssdeep":"","tlshash":"bd01707a384364f635b622b63373b608303b5375650dca5093e10b55b529e83c66aaec","first_seen":"2026-03-24T00:35:18.770757Z","last_seen":"2026-07-12T22:10:39.098619Z","times_seen":104,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/markets","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:10:13.466Z","timestamp":1783883413466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /markets HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImRkcGo3Z1ZEUEkzVUF0bWNtV3p0YlE9PSIsInZhbHVlIjoib3hMTnV5N1RWUVZFWmxEZStoazZ2cFpVS2NiUzA4all5MnB6MGlxS0RnUXRIMWNocEdCZS9TNVJZRFgwYUlPY2lPODBXYUJXZGxCakZiMThUS0ZlT1NLaVp3L2NrM2VQZkpoNEYzR0EyYXpGaFFpZDZuZlNaSFFyNDQ4cmw4OW0iLCJtYWMiOiJmZWY0YWE1OTdlYzc0ZjExMDBmMDExMzIwOTkyZTcwNTZlOGE1ODcwZjNlYWQ3ODNiMjlmZGViMTM5ZDg2NzI2IiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6IjRNZnVnSnpiNWZ6MXVQdDB3RjYySUE9PSIsInZhbHVlIjoibFdHd1IzSDQ5bmFHcWR3NUx1ZjlhNmxkeVZMUUFucVljMjhVMG4yK3lIZ0FUWUlsQTNraU5Xemt3NXNNZW5SeUp2ZHltRnFqNit4SWZTU1Q4RjMwWnduNmFLYUx3RWJZZkFxaU5UYWRyZWVaaG0zMTVrZzI4MjVRTzVnQUhmVVQiLCJtYWMiOiIzYWQzNWE5OTY4NmMyMzU4YmUxMDhiYjQ4YTVlNDdhNzc0ODI5OThjNmZlODk5MGI3ZDNkNjYxMjAxZTllNzE5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6Ik9hKzRjVHNxaDc0b2c3bG1UeEV6L0E9PSIsInZhbHVlIjoiOWJvN1hVVHRXeFRFMXRvZDg3ZHZXSWpOYUlaemM3MUg1YWQyRDJUZm5ocllxRjNBNlRsMUkrejFTL2ltUUZQQUNCaUM5YjJSd0lJRDZ2enZtWUl1eGRNNTd6UkliYnBtYW41L1V5d2FnYlk9IiwibWFjIjoiMjE5NWQzNDAyYWY3ODJhYjkyYjc5YWIyODc3OTZkNWM0MGIxNDgwZGZkZTJkMTc0N2ZmNTFjMzZiNzUxZDBhYSIsInRhZyI6IiJ9\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding, X-Inertia\r\ncache-control: no-cache, private\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\nlink: \u003chttps://heotox.com/build/assets/vendor-bc31K948.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/app-DoSjg5hQ.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/Icon-C_1jhIKR.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LiveActivityFeed-C2Pnukrf.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkInput-1lYlWzru.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkLayout-D8JC1FIO.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/styles-CQ-IdED1.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/MarketCard-CwYgn7yM.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/MarketFilters-BdbLFMVQ.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/UpDownSlider-DPI_q3wc.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/DepositModal-Bm2HKEj9.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkButton-_wximxh8.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkModal-DLe5wved.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/HowItWorksModal-Vl_X5AzX.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkHeader-BT--crTC.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/MobileSearchOverlay-BBuj9LuE.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/HeaderMenu-BnhvYEMo.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/NotificationBell-CzxYZmxH.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/SearchDropdown-CSNXB-FD.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/UserBlock-DO0zZ3Mr.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkSidebar-D-eOVEPN.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LanguageSwitcher-BzD7FPJX.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/MobileBottomNav-CNXNJXo3.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/SupportChatWidget-ByyBsqdF.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LkCheckbox-cR8QAYr4.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/LiveQuickChart-CiiG3_iC.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/RegularSlideCard-eh9fETkM.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/EventMarketsChart-CD3ty_U0.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/Markets-BQmaCn00.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://heotox.com/build/assets/app-9urWGCDo.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/vendor-Bensp44_.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/vendor-vue-BaKSsOLw.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/vendor-realtime-DINYGnMF.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/vendor-i18n-BpxRKoiJ.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/vendor-charts-BqNOPzd1.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/Markets-mdYtCzoi.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/Icon-lM0uRtJ7.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LiveActivityFeed-XHp5su5e.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkInput-BouVFP5B.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkLayout-D2A-GwN6.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/MarketCard-HscHskKU.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/MarketFilters-DgqPiVpg.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/UpDownSlider-C3Zi_zXN.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/livePrices-DCrIK8eH.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/_plugin-vue_export-helper-DlAUqK2U.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/DepositModal-DX0fUzdD.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkButton-IwG-YtOS.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkModal-Cajmz3Kk.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/HowItWorksModal-BBfGyObK.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/useBrand-7iKP2T9i.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkHeader-Dy26ziMz.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/MobileSearchOverlay-BR-EcC5J.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/useEventSearch-DN3p4Hwm.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/HeaderMenu-2OkNNE8q.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/useEnabledLocales-CCmqlSZB.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/theme-C0Xq8wRk.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/NotificationBell-DBiTXmPX.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/SearchDropdown-pd5yFy_4.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/UserBlock-eXuExVEg.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/gradientAvatar-6gze20LW.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/liveBalance-IF-5Ff7C.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkSidebar-DVy9B0dU.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LanguageSwitcher-JGWiGE9_.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/MobileBottomNav-BQzi_t2B.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/SupportChatWidget-CRo2HmSq.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/SeoMeta.vue_vue_type_script_setup_true_lang-dMsMHD_T.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/haptics-ClEYL9_z.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/format-BsmBJXpJ.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/useCountdown--EKxX590.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LkCheckbox-CYO9qhcT.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/LiveQuickChart-DeWpSezv.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/RegularSlideCard-EzWS0a7k.js\u003e; rel=\"modulepreload\"; as=\"script\", \u003chttps://heotox.com/build/assets/EventMarketsChart-B025cHpt.js\u003e; rel=\"modulepreload\"; as=\"script\"\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), gyroscope=(), camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'nonce-34cb74e0f98ed08c31c9c17e34fca432' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.bunny.net; connect-src 'self' https: wss: ws:; media-src 'self' blob: data: https:; frame-src 'self' https://www.youtube.com https://t.me https://oauth.telegram.org; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 21:10:14 GMT; Max-Age=7200; path=/; secure; samesite=lax\natlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; expires=Sun, 12 Jul 2026 21:10:14 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\ntp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9; expires=Mon, 12 Jul 2027 19:10:13 GMT; Max-Age=31535999; path=/; secure; httponly; samesite=lax\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2yYNxLqZmotucJ9aKhjWtLQ%2BQqo%2Bh0faXqB15HYd6CM0X6wmR6Rdo9bPlcIzFEGwwK4e0rLgvpGCIo%2FL%2FW5dquOZYwDaKVvLt7jEQMtcRaUor%2BTffaDOYDhU5pV\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a258c62f713181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}],"data":{"size":988617,"size_decoded":104632,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48696)","md5":"7c8d042e9ff8fd7ad742cfe827057ea1","sha1":"53cb2aad89f3b5859dbdae697d1634964ab88599","sha256":"8988780a8b05af50f4b9c5dae822c34dcef2d0a9cdc3f2f59bbbc43a29cd0c96","sha512":"6c17c8620ce8aa6b0d02bc915e583f053dba3a7ed792a84588a53215d124857de4e110fdaac84caf737eb62cf1d14f3426b377e0e683714c7e26d0f8b605bb46","ssdeep":"6144:MZDalGTqDalGTHPLV/BIkZ5aqackkc7eqxRxG7j:CDalGTqDalGTHDV/BgeqxRxG7j","tlshash":"6325b53ad0f7cb3a487e3484c05d2b94a7dbc35737d623faa09a44586b1165e9d0b8ec","first_seen":"2026-07-12T19:10:59.695838Z","last_seen":"2026-07-12T19:10:59.695838Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1091,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":973,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Icon-C_1jhIKR.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.694Z","timestamp":1783883414694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Icon-C_1jhIKR.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\netag: W/\"6a53a112-54\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hueJZUhc%2BwewoOsuOwg4Pjz58NhO6kYfMtp95vZ0g8nUFdPfhsc%2BzxNASW2szXLJiAOMt1a5e73EFuzIMCocjKDzXY6Dl3j3j2Yi5ztNgql82aB1EruTyBpVzh%2F5\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258cdd8c33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":811,"mime_type":"text/css","magic":"ASCII text","md5":"b1ee07128c99b741d53be854606e06fc","sha1":"a68f938c2ce7108377e74f1a41743f7e4306b8c5","sha256":"11b95d9b225a1378014a8f1b646c12e2d0c7aa0c775548b37c07a6132b7b60e4","sha512":"c954e670377a134cccf11604228a4721854be37badbc42c3e1dbb78ef12e07d549bf0197621fbd4c7638405b41c4190edce60ab16dcb5f098b37d3381699fe75","ssdeep":"","tlshash":"1fa0120152644f100119c010498091e265531165555b2aa09c09cb20001f4a83f00c30","first_seen":"2026-06-28T13:42:53.960811Z","last_seen":"2026-07-12T22:10:39.142193Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/EventMarketsChart-CD3ty_U0.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.728Z","timestamp":1783883414728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/EventMarketsChart-CD3ty_U0.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-4ea\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OzvjFCyrodT5wy4uGlYAtOoIIYpxMWNdpz7a9RWa16jZOjLXo0ATiO5vryWXM4IKnzWi%2BYWpuhh5EKSCZIvuXH6no5xaquf5DlQqsEguCW7fP%2FzZEr6MgpXCqs%2FQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5025,"size_decoded":2046,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (5024)","md5":"c595f7da679ba4ca67711b79deb53e8d","sha1":"082f78b74f8f0cbbc67cda381f2c338350580c36","sha256":"cafb2fa854759ebfb4b93ad48f2e5da8c57ffcfab0859796bf45a20ea30e13fe","sha512":"ab512022003db0fc25b43321e1d85fac39d7e0bd962af597dae166706dad333b2561cc159335812b7cbaaf7436f00b1355b4e62598964127ac25f7a7ee8168f7","ssdeep":"48:fT+MsM3kBF3URVKJEqs5iV+fZkMPUU5UylH2p+4Il3F4Soe25QnHF0RVKw4moPmz:psHEKLM2oXNP0KK82MkFSjADPOSCeQa","tlshash":"c5a1e1d2e4aca43da47bef68db5926cd1230b5a3e5171749bad19e304cc3fa31da0984","first_seen":"2026-07-10T10:24:44.90365Z","last_seen":"2026-07-12T22:10:39.098152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/_plugin-vue_export-helper-DlAUqK2U.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.748Z","timestamp":1783883414748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/_plugin-vue_export-helper-DlAUqK2U.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-5b\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Ut%2BmU0%2B9WHubg6VwjCNQ4O299YvEJIk38RxqSx%2FhNYdrBYezFhFn3gsc3FJUuaXBRWtInM87lAmCzMhE%2BL9TAzjdO%2Bwc4kgHZHLVUpUtDYh0jR0VPl8P3Wu8XyK\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce29023181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":844,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"25e3a5dcaf00fb2b1ba0c8ecea6d2560","sha1":"7850b3fd4aeb69387bdb5a60025d15c41351d5eb","sha256":"cb85b0f263dbe24e857338301c0627076592e9f1f1a5662929f86d2c126444aa","sha512":"2e5cc9b53d5641147f68c73e5db0442d93fb6a64da45cfc051da5550a2fad07e912e651bd730e54325ef74eb706be0c5df612355c1dca144ab6e9cc8c4ecc73b","ssdeep":"","tlshash":"1fb012c81cc3e078939818d47738c15844380448310742b0808c0943e2c20809797c1d","first_seen":"2023-03-08T16:39:49Z","last_seen":"2026-07-13T12:20:35.37656Z","times_seen":24000,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HeaderMenu-2OkNNE8q.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.759Z","timestamp":1783883414759,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HeaderMenu-2OkNNE8q.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-84f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w30sXXk7t8IJ2wbe75OENFkWiw8UQbv6%2Bm1t4iiKSLtm0pbHFRMrTUV7XeYVMsMmBAtPh5WOs6v21ei9S8kyqAAmIf2VbBf549glIUcHMzwNVxA0KQdKoBNknyso\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce39113181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6273,"size_decoded":2940,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6230)","md5":"04af62aa904aaac2087f137db782e1c5","sha1":"a3adabbf1e5767592cc0b41a11bf74741387f9bb","sha256":"bcd2168bb7d2458f4adc0aa7e98d25f857cc1438202f51410ef25abbc6575ac0","sha512":"69f24c36c01305ba097cce53f01f74df563591bbcaf420cbcd64660805dd98a02c8777c48ba6b87536c9c59c44565f2c937f2ffbccec3cdfaf15ee88b2533945","ssdeep":"96:V6iB4NzgTW2Z4ADF/MXKxtAsGAzl/LIaDGgi90S30gi9mieMl8gi9lENXWJl/plq:YiB4StAnAzNGBFUQ5F+v2VLM","tlshash":"95d1a61e6b86b87cc11ba098c305793439691b5de10e6840cbfd8d3862f5d58f7f365a","first_seen":"2026-07-12T19:10:59.702781Z","last_seen":"2026-07-12T22:10:39.15752Z","times_seen":3,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/assets/images/logo.png","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:16.801Z","timestamp":1783883416801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:16 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 11 Jul 2026 12:31:27 GMT\r\npriority: u=6,i=?0\r\netag: \"6a52379f-38253\"\r\nexpires: Tue, 11 Aug 2026 19:10:15 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nage: 1\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IeNNkjnJDvQeOsHg5dl%2F%2B4IRPqpJsd%2Bc2EXz0lgASEY6715LjIVgVBoyqEvPN00n4KcIDbiZ1IsTRJxuENlabVxTZVBeSkc2YmcOZVkISTiHLtnQ3GxHrm679CRl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258db0b963181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 229971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229971,"size_decoded":230712,"mime_type":"image/png","magic":"PNG image data, 411 x 489, 8-bit/color RGBA, non-interlaced","md5":"c11561c52ea2d9c997e4a66e1ccb8d1d","sha1":"eda01c99ab6318e23b43285e38431ee0766f35e7","sha256":"fe5df8df4fb624d64664c1813a1c64ed7a54594f7f6f6b3254006299345c26a6","sha512":"19693b3432202003760072a55c6af6b323d1fca60bf1bccc6502e54d81c8d67ac444ff384c9b92bea7582638c8c6acccdc74ac8227b649634a45c9b5d8edae60","ssdeep":"6144:JnlZCkyzK7z4fobuLcwzhM/KkomLAd6FkcLH6:3YzK7r6LRM/KymBeH6","tlshash":"f42423edea9f0df392cd79a259536a83b1bd34f7510ae376ed9813334d46c20a5620e0","first_seen":"2026-07-10T10:24:44.85414Z","last_seen":"2026-07-12T22:10:39.103267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkSidebar-D-eOVEPN.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.720Z","timestamp":1783883414720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkSidebar-D-eOVEPN.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-461\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FTeUEFNJrtl8GS%2FNYdh3pMCRwsvgc1b%2FiBN%2Fll0yZURDIBYODUK74wXCz9t5G7HW59VKElsWld7pSkJbbdgRvAEtNdiAxGYej%2FuxBPR0Z9UABQPXCQX6Gqq98UMU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08dd3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1121\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3833,"size_decoded":1913,"mime_type":"text/css","magic":"ASCII text, with very long lines (3832)","md5":"c90758317c2738507aa83c1351595069","sha1":"16e436fcf583d7c632f534ca5debb0e2776f7b8e","sha256":"9346ff20f503b90d2b31e7a2627bcbf178c59bd41ac335f9f4484cd2d3fa5689","sha512":"bd9d4a4ff2513360446d855ad7e3ed7c423d9cd1f368aa56ca49ee2174ede78eaf877a05766d727683c57e54ec2528bb516f2fda7d14025e0076404b674b99ca","ssdeep":"","tlshash":"9381e022310820667577c043d8e402ad51ede6a7a33601edfb89cdb708bb39667611fd","first_seen":"2026-06-28T13:42:53.962456Z","last_seen":"2026-07-12T22:10:39.073627Z","times_seen":7,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkCheckbox-CYO9qhcT.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.783Z","timestamp":1783883414783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkCheckbox-CYO9qhcT.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2da\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ynvrfrC6O8AxQYq87piBExkJOg6gyvW6quYFWL3Wk%2BKR1Q4iJCzJZoBspGZdwp29jd4UV2OM9zpTR%2BKWb3kMoJ7BInpm1XttxhaPFzXWDOuKYdjHs9XpZ1VTbRMu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce69283181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":1544,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1339)","md5":"9a248be8d50f2e69bcc9c998a02a964e","sha1":"8aef6d7c1f08fed809107d069b692c843af34ed4","sha256":"320fc7486e2331418f61fe80fc1aaa0562ae66384cb21e37572fa647205e095e","sha512":"92248892c8321b581a9af1da581123ef314e4e0a58805fa65a3a9d388bcb3111ebdd2ba672b01ca8ed326c8626351ff84c76fbf225616b544bdd819254a6362c","ssdeep":"","tlshash":"7821a50fad58f5b885572866c2177815623c2b8e9a0404748fec96383b2dad2dc17624","first_seen":"2026-07-11T14:32:36.312609Z","last_seen":"2026-07-12T22:10:39.072426Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkHeader-BT--crTC.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.403Z","timestamp":1783883415403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkHeader-BT--crTC.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-297\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZ7a1l2GEgTpsUKUGkKv9bUOabK2ESOFWk%2Fhw8D1wjw15CMsENrG4hH%2Bh9c9DFZd%2FsZedhDOHMY96ukZ1Nt0%2FmqM4J3ekev7%2FWlFWup%2FiBdINIw0b7c0lr0lpgOW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d24a273181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2577,"size_decoded":1463,"mime_type":"text/css","magic":"ASCII text, with very long lines (2576)","md5":"4dfcd1e874cf713c6614b52b5db07567","sha1":"4c9fd31ef3ef18396540d80f6c0fec7fb4de5e9e","sha256":"7be1dc5d34f30bf4898c776b1894af9a49a08671ff89fe9b43bb0e75b50bd2c2","sha512":"0544a9eb83c4f109d837550e9dc9b48a16a09143de39d004725e6de307d9a80dd122bfb58f428290723ff45f5e2c0a482cd11ea76b93025c2344be675cbcd683","ssdeep":"","tlshash":"0d51cc8fa20da23d383bf42389b42e484614e11bd69519d9da88719f4ccf9991f78dd8","first_seen":"2026-06-28T13:42:53.996542Z","last_seen":"2026-07-12T22:10:39.092502Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/RegularSlideCard-eh9fETkM.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.424Z","timestamp":1783883415424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/RegularSlideCard-eh9fETkM.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2ed\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcGFPqrGcN%2F5f8y2p4qGuOC2B5CssPg%2B8%2BRdv9CvXq%2FcTFJ7uQW8IpJUpsVqh5WOgosZv6ZlBsmcaTInKscHd583xdVWZLNlZRIO4nxRMXVXH3t3MM3ik5mDae8r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d26a373181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2235,"size_decoded":1545,"mime_type":"text/css","magic":"ASCII text, with very long lines (2234)","md5":"e6eec4aa53488ac07bf3e6bd58b49465","sha1":"c5bdfff9becd4bfb38cb0f25763228a22c3220b3","sha256":"5329ce60321ef69aa5f7c048231f997bfb9bd52ccc2df957488244f9e79830a4","sha512":"df5041c8557d4ee3a4f5d0ce468625d0421df721fa8c37878f0f459090083a74e141fa8ef012ddf6aba74d954c36209aed59d2bfe72bf2e4e4c133fe70ba64f1","ssdeep":"","tlshash":"c841da69fd8e5b38e6bbd81394804b4f7704963287eb01ca9f45753849cb1e32d2d54c","first_seen":"2026-07-10T10:24:44.826251Z","last_seen":"2026-07-12T22:10:39.077627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileSearchOverlay-BBuj9LuE.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.713Z","timestamp":1783883414713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileSearchOverlay-BBuj9LuE.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-488\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ow2gdWN8IvqDnvQ53SdCUhiRQN%2F3enassiyd8I4AnV58zE%2B%2FmomamBNt7akXk3gqaOJ2JybcXtYwO5n85BQ01Lhd8R3kinDgG1QYRxl9HDqQKl6VRM4O5kKkpwxY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4109,"size_decoded":1948,"mime_type":"text/css","magic":"ASCII text, with very long lines (4108)","md5":"92a8894d470f5e66275463645e32f896","sha1":"9b226e42b300224dae7eaff8573e7483e4fd9809","sha256":"203a79701cb29ffcc2fbee3d8ea4cc49e4620c91940b7b5480807b2cfaa1c4ca","sha512":"cf9ab5bfc45d6e8bcfd1ef67efe97d72148e503fa19a0e8a5aeb35c345ee4d7283ecd08f195fb21790ba7214bcfff234066878f007cd767d3533b9b073f72314","ssdeep":"48:/yG5BGEetSEk83fY/0c2wen2DVX9M6b5eombtWYgbZcJ5MQPeJ5BeJL:uE6w83fzc212Dd9nbTiUYgF3j4","tlshash":"0781edf672d8603c343bf5b36998468e2318f39bcd936687f490612449c3bf229384c9","first_seen":"2026-06-28T13:42:53.942211Z","last_seen":"2026-07-12T22:10:39.097005Z","times_seen":7,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UserBlock-DO0zZ3Mr.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.719Z","timestamp":1783883414719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UserBlock-DO0zZ3Mr.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-45f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uaeoPYGibdvVb4V%2BjeDCBd1771CYS1d%2F23x4hHoFT4YRnKje10Aiz2UkxxGhqiCap%2Brn4HDCV1Q%2BTfz5uHN8qEh67ejD50kYWTDAZ%2BX%2FS%2BH%2FYqzGLCkuJylhs%2B62\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8da3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3931,"size_decoded":1919,"mime_type":"text/css","magic":"ASCII text, with very long lines (3930)","md5":"43ba824c402aa1b3316d8ad717ba6472","sha1":"1dad0ead225ddc279440db46bed6baeed0e83746","sha256":"f84426a9c53c37a7733aa75dc3bde6dc7c71ba600502de7bfd55090b8fec7cd5","sha512":"2ea7cdcb76b7493d108bf888ae0ed0190abedf1934f7870b3b796b99f1eb4c19067a3b18b84a2b76a762b7e69dccba2099a76b2e76023f475c235658ba9ec385","ssdeep":"","tlshash":"78818b03b34c105bb663f59215f8c9c415b4e743df3365e6b27861268af3b9192b1a8e","first_seen":"2026-06-28T13:42:53.861458Z","last_seen":"2026-07-12T22:10:39.077124Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-i18n-BpxRKoiJ.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.735Z","timestamp":1783883414735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-i18n-BpxRKoiJ.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-4f50\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEi0CF1XP%2FaXUh1%2F4hQi3epnnEIT0hP%2BDQjWuq78LxZrfQwfrTz1J5sWnt9M%2B4hxPZhZUZG3bfqGvjXKJXUZuSHkci4ZYpeHbL0rcZWIxdhbUUcFzgIiuPrMkTJv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18ec3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63427,"size_decoded":21125,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42644)","md5":"7ef4d6495f9e78aa5b9d8fd44fa9bfb7","sha1":"1ed6afbe46f11bf1b9731063dbf18974b02724f2","sha256":"4aceb2dff293515958993acb29817819a3f41de1e9930dc2286e887db88e5601","sha512":"e833154da89885f0b3ea9d19bdac5ea5e6e4d69064bc2c0ec1ce06317e8699b62bb2f4042707ca589d5941ab8a9d8e8a62c1f0a59dff2f9192103bd664faa0e6","ssdeep":"1536:ym7n1NNBdTXweFd4ocySRcJPzASjmguov+C7Uez:PnvNvTwcd4ocySRcJ7ASjmgu4wez","tlshash":"9653f7c971d77056877a46e960b3004abb3d2a94740dd894e0adea8b3e33c5943f7f58","first_seen":"2026-07-11T14:32:36.323604Z","last_seen":"2026-07-12T22:10:39.155138Z","times_seen":4,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkInput-BouVFP5B.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.742Z","timestamp":1783883414742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkInput-BouVFP5B.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2e4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iORn7aqMYhejjt7URyDl4HidkxP3Nbf%2Bkiw94IhkzxdyJdEPeBgUBz04lvR4mGO%2BogWc8X3zNIkErZ3HELhDRt0XyZMD8Epinhc9XX0ddjNWM0Yta7W5uViFAPR6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28f63181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1699,"size_decoded":1554,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1698)","md5":"7d461a43f026b31c8e7c762d8916d9f7","sha1":"a44f4ca0d310495d96765c8b29eb7543ad5f7837","sha256":"520ae62656a5e2e8610c25c83c08cc9b157c563878b1f04a644f946846ad0533","sha512":"4b95b8be062e36391046124db17e9ad50d38b30f35d85a8518f1d809f119123a73047b30478159464e77e202600e5001737d7c3e96f7c507f91f450a44cdb1e9","ssdeep":"","tlshash":"7431300e40158ab38573ddb9c2a2a400a29c1f9d9e218499b0ff8a083b7dcc4572ff74","first_seen":"2026-07-11T14:32:36.232998Z","last_seen":"2026-07-12T22:10:39.08348Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useBrand-7iKP2T9i.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.754Z","timestamp":1783883414754,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/useBrand-7iKP2T9i.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-1c0\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WxMvlJwD7VupPjzgLsN38TOc%2FfPkU3DpW5TrHSKbD64DEC9vVIz%2BR9rxoTWWi2h68694mqPkDBFrgkPpcJ2cokMp1Ey%2Bjt%2BhowMWcN0OyAGaF9%2BtphM7%2B9vQssUA\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce39093181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1040,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (447)","md5":"6706b0adfdf13f911a350783a72807de","sha1":"8675ce4dbbf70395f1527383cd09116581681c10","sha256":"6da09e66d4748843caa98c15ebc53bfa0de93ed8a1b760fa1102e468383ab5bd","sha512":"e7cd67fc26ebdcda1eb7d76943eeffb40332d97a741bad8f2de6003f95a68bf21ed651ab2c899c2b6c860c00a33a416c29547b0b1c6694cad6acf4861a50d76b","ssdeep":"","tlshash":"a9f0550a62c63074079a30a451e31480430aab237143aeeae0678f030da1902c4fbf3e","first_seen":"2026-07-11T14:32:36.331152Z","last_seen":"2026-07-12T22:10:39.085524Z","times_seen":4,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://polymarket.atlascore-panel.net/app/f6994e070870b5fda529add0aaccec9d?protocol=7\u0026client=js\u0026version=8.5.0\u0026flash=false","fqdn":"polymarket.atlascore-panel.net","domain":"atlascore-panel.net","tld":"net"},"ip":{"addr":"104.21.1.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.377Z","timestamp":1783883415377,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atlascore-panel.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 09:24:53 GMT","end":"Tue, 25 Aug 2026 09:24:52 GMT"},"fingerprint":{"sha1":"AC:CF:A9:00:F1:51:9D:07:6D:96:76:70:1F:9D:3A:EC:0F:50:D9:6A","sha256":"3C:CD:11:06:77:74:25:63:94:E0:70:C3:8C:94:DD:3A:F7:4D:1F:48:46:89:19:5E:3A:12:28:BE:39:A7:21:73"}}},"request":{"raw":"GET /app/f6994e070870b5fda529add0aaccec9d?protocol=7\u0026client=js\u0026version=8.5.0\u0026flash=false HTTP/1.1\r\nHost: polymarket.atlascore-panel.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://heotox.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LjC6/SosDroS9xcPYhdH7A==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 12 Jul 2026 19:10:15 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: g1jj5OsbC6JALkGL4uG0pNJmhAA=\r\nX-Powered-By: Laravel Reverb\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nPermissions-Policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8Iux4%2BvY3ji6SCdSp77m5hixvo6ykfCOfglXtJUZbfK6qI0C5un8VqZT1mwp7chzPF0uVxqF40c%2BrKrBOlaVu4j95Z3deUIv9Cvq%2FvhdzhdKcCNkfeeaMDjyOlRIUiBrj8zWw9Ay5vaGAJJLEQ0eB%2FQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a1a258d25dbe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=849\u0026min_rtt=821\u0026rtt_var=365\u0026sent=4\u0026recv=6\u0026lost=0\u0026retrans=0\u0026sent_bytes=2442\u0026recv_bytes=1428\u0026delivery_rate=2372623\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=a0724e4e36aa4aaa\u0026ts=96\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1045,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T12:17:46.716515Z","times_seen":17212432,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":29,"connect":26,"send":0,"wait":90,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/EventMarketsChart-CD3ty_U0.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.421Z","timestamp":1783883415421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/EventMarketsChart-CD3ty_U0.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-4ea\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYZ6lekcfc7%2FHbYCd%2BTfQP8hIH93rOtPO524h12VWWt0uCa%2Ftn4rG%2FL9xSEkAOC1deXoiKEjiI2USY%2Bc%2BpDH48rbnkmhwiugb%2F36WB%2BihTEmLwZkXs1V3GIL5kTk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d26a353181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1258\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5025,"size_decoded":2063,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (5024)","md5":"c595f7da679ba4ca67711b79deb53e8d","sha1":"082f78b74f8f0cbbc67cda381f2c338350580c36","sha256":"cafb2fa854759ebfb4b93ad48f2e5da8c57ffcfab0859796bf45a20ea30e13fe","sha512":"ab512022003db0fc25b43321e1d85fac39d7e0bd962af597dae166706dad333b2561cc159335812b7cbaaf7436f00b1355b4e62598964127ac25f7a7ee8168f7","ssdeep":"48:fT+MsM3kBF3URVKJEqs5iV+fZkMPUU5UylH2p+4Il3F4Soe25QnHF0RVKw4moPmz:psHEKLM2oXNP0KK82MkFSjADPOSCeQa","tlshash":"c5a1e1d2e4aca43da47bef68db5926cd1230b5a3e5171749bad19e304cc3fa31da0984","first_seen":"2026-07-10T10:24:44.90365Z","last_seen":"2026-07-12T22:10:39.098152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkCheckbox-cR8QAYr4.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.725Z","timestamp":1783883414725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkCheckbox-cR8QAYr4.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-29f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BMJmOAZZulCbC56lE7IMv%2FsvHI7s1WIfZsgomIAz9oZm%2BfEihQNpfM1xf504N1HX7xIwFdkc8l8nFzyldHkj05wzrW7Vwal4u7fw66MFmSUwZ8J%2Fh%2Fz6bSVaa6uc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1809,"size_decoded":1460,"mime_type":"text/css","magic":"ASCII text, with very long lines (1808)","md5":"9310255707e36092ea3beecfa8ea143f","sha1":"ef41948f538f6a8e748ae74284acee51bcfc519f","sha256":"7b43bbb07cbb40bee04b6e66ce0e4cde180be73926c077366fead1ec460879ea","sha512":"df2cfbf631487f8dbc9fc74178368cd68f61e24c27b46141ba4ba7139bddc90818e6c7ff78036c1dbbe2125f62bf052667d0e99f76af4d0223a8c4ff7f54a3fa","ssdeep":"","tlshash":"5b31e027b41ca1eaf427f01b3edc8d855108ef0bdd214796dbd5a50985c3ba9bf61284","first_seen":"2026-06-28T13:42:53.982183Z","last_seen":"2026-07-12T22:10:39.070889Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/theme-C0Xq8wRk.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.762Z","timestamp":1783883414762,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/theme-C0Xq8wRk.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-221\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4sPX9R0THMO%2F3ocHr3maRVnhmWoGtpEt7%2Fkek6m5Qs9YhvgGdXuc7KZlCmnzYApz9wsHkVOt%2BEazu9TXQZXZIbX8ZvDGdz5vVy4q5W9%2FJa4le5yePVDY2alNsTf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce49183181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 545\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1235,"size_decoded":1363,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1234)","md5":"e12cbcfb91ec098954995642999b89c8","sha1":"d8179edf17d0dde9f517cc533cb1c44ecc4f5763","sha256":"816e0be1d3c8bb9c39deb9799fcbef84cb31ce29a8971dce3c1a2f0e29cf8024","sha512":"8d0bb3ce78fe0599adcc73b24c4026861ec92edf6c36c0146d99a5c1dc10107e89bb6a52fcb2da4b99bf14fa00be66cadc28d5d0602336a927aeaf6795c0a3a0","ssdeep":"","tlshash":"14217bb93880573d079b04dad0b2df897a38233179496950d28da4583876d9ec223eae","first_seen":"2026-07-11T14:32:36.298346Z","last_seen":"2026-07-12T22:10:39.128954Z","times_seen":4,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/haptics-ClEYL9_z.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.778Z","timestamp":1783883414778,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/haptics-ClEYL9_z.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-39e\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWZLomxIDAI1%2FvwMXoQIUttqoKY%2BKhVOUXMu6ueWJUh2ZH%2Fv9QM606Qtm4acj%2FupoiWuiLIE77rEJHDSGXBcKgmIALhLmxv%2FmS8S36UM68bi0N3DNt3Hu1mXy8VC\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce59243181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926,"size_decoded":1304,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (925)","md5":"9be8e5cde803a81c8bd9ff788fa1d176","sha1":"8a687d1c92e19288793fecf815b1e3859139b16f","sha256":"adc7c169a89baf4ce30ce944108423179605c8a75b159884fdff6e9516b3053f","sha512":"75ee8bc983273436abce845a1d24f5c01451d042af5bdcbe76f1b367386a454c6c50401c422c35bbf7d6425c3b2ee6485b0191f9678ecb6998b7df2fd318e6e3","ssdeep":"","tlshash":"2611e1741156267582a6202a3276cb00f9226e30780f150150a9ccfba8fec39197ef89","first_seen":"2026-06-28T13:42:54.027463Z","last_seen":"2026-07-12T22:10:39.088952Z","times_seen":7,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/useCountdown--EKxX590.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.781Z","timestamp":1783883414781,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/useCountdown--EKxX590.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-344\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUEXzAf0KoAytMU0cPQEMpZIYiYEt92hKebWmKz5gxzXETPOalYBOkjjFimrp6GSrTWmhHlrgjjl7hH9MFP4uM2oQbOwjdfsOdsuVofSDio3KRcSpx1pvoLv%2B9jm\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce69273181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":836,"size_decoded":1236,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (835)","md5":"025400d086620dbaf671579ff119e451","sha1":"47028f05699d0a9d2fa75a95a30bb475da793ff3","sha256":"a531bc1fddc8a34fdf31b859b9c440fa65b469240265856600fae087fa775420","sha512":"bf9e11db24362ae28bceb5723ea04883c3ea06f84bcad9291ca574aacc7e2a999a825b85c68de92e2e7be16cfa723df73d54ce06e4ae40623d6f2218e6008e15","ssdeep":"","tlshash":"3601ab54756494a017320cc203671b6a2112ef25748a8ac2526d4ea23a7bd67c2ebb9e","first_seen":"2026-07-11T14:32:36.308529Z","last_seen":"2026-07-12T22:10:39.100266Z","times_seen":4,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/who-will-be-confirmed-as-fed-chair-Nq__lShY4XIm.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.239Z","timestamp":1783883415239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /who-will-be-confirmed-as-fed-chair-Nq__lShY4XIm.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: jRuNi1j52u1FTLDZEpif9oRNrqRkWaCbk6P8FBLlua8BG7KH7Nd11MgPuKmZWZmn5VynsfFJTDc=\r\nx-amz-request-id: 2AWF14XN5Z4PPNJM\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Wed, 04 Mar 2026 18:35:11 GMT\r\nETag: \"7fe846c4cc05ece66028114627d6bb22\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: _c3j2yZEZZXVbzGUORhl4pFpOcqBzx_b\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 124557\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":124557,"size_decoded":125034,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"7fe846c4cc05ece66028114627d6bb22","sha1":"ab59d5a43af2a6c0dca7285ec5bb68ed45ab18be","sha256":"63b0865393a8737d7c10b84501062c13f6eeee3abd21e0bc05e9a2eaaba7087b","sha512":"4069ef1839f368336ed6459c846e86c13206b3912ba4069ee3fb5b6dd882ffab7d54c53e412ef62db3ef894891d98b042013403bfcd91ac1bfd07b516c28cc18","ssdeep":"3072:za9zWdIgkCEmPClHhb+7zl/QNdwqFv/qgph7geP0eLI:9Ig+lHhs/QNLhdl7PXLI","tlshash":"7fc313c1b68590d07f2e46b96b46bb34b4abfc834756d73c4252fdb00ba943d5f942a0","first_seen":"2026-03-22T13:20:59.49315Z","last_seen":"2026-07-12T20:48:05.834626Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1784,"timings":{"blocked":-1,"dns":3,"connect":108,"send":0,"wait":129,"receive":858,"ssl":682},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SupportChatWidget-ByyBsqdF.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.724Z","timestamp":1783883414724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SupportChatWidget-ByyBsqdF.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-8f1\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qaFnZXxjlCC5SpQ%2FtMZ6kY90UaSWnVE4bgjU1NZytSf1FxD5o9qwzNMRXC4cQDbgkpPV%2BIhWv9Q895f98gvBc3HOv6VFvkDL9PRyFXa5%2Bzey74tG28g57%2BxWkhQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8962,"size_decoded":3079,"mime_type":"text/css","magic":"ASCII text, with very long lines (8961)","md5":"e791c83dfa869c0aada1a0c6c4d36eb4","sha1":"67d72b32868eee984077e581a10d2176d1cf2ed0","sha256":"6ef939bfe47c3b6cc1608d7cf5bf46e58b7aa87de3bb8faa29caa46622ada7cb","sha512":"352dac5a9feb5c959c8da80afdcfedfdcf67c95f0ef53db730d4546fccf8468bc29a07c4c8168b26fa016366bff211bbe5fe2d9b365aafa20e7923c310587016","ssdeep":"192:CyXmIH+it11q1qOtjrhOM6EK2/CEBiyIu:7xGqyIu","tlshash":"eb0244707908621ab837e39635dc06ae3016b207d67366c9a951e13dcec75f33d3d686","first_seen":"2026-06-28T13:42:53.964004Z","last_seen":"2026-07-12T22:10:39.104305Z","times_seen":7,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/app-DoSjg5hQ.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.692Z","timestamp":1783883414692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/app-DoSjg5hQ.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-827f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVzGiBrfetQ6PIIT53pfuYI1fua%2FjDFhHNCFNyoJJZR6omMsdDpLFc6xe%2BVWMzWZ34fzmnqP3Y%2FpQKcfLM%2BKYJUo%2FSsdSjvHYfCsTZ59a9w4osQhZBL5%2B%2BlcDCd7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdd8c23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33407\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":227091,"size_decoded":34205,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d1043fe2a382078a0d288358211e7cf0","sha1":"3cae246effe783fa9b3a6779268b6a8f87aa323b","sha256":"21e69e059cf174b5a2b350ca5467fb82a5ebfa07e00415c673cac7a8075d0749","sha512":"50f893115577d878c9140b12a77e5709d08010c8af6a2f72f66cb12be7c74fb26a59ee1a4dbc5e8dfe608dee0d36e1269eeee2f8ea74375cde1ac56918c729b5","ssdeep":"6144:NFF9GD23E9k+SAqKvi4hZwyDxOD5kk2xKVeTCNSYDgZGGAVE+cQIhR9ZOOufZ/ky:R","tlshash":"302482a0f128e53f7d2368bd939ce84ca11e7085ae1697fdfa21612217c7bf26d93504","first_seen":"2026-07-11T14:32:36.282868Z","last_seen":"2026-07-12T22:10:39.115003Z","times_seen":4,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HeaderMenu-BnhvYEMo.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.715Z","timestamp":1783883414715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HeaderMenu-BnhvYEMo.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-564\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52RmqJefNfNkh9PDVkqvGayFgxcbSZ%2FlGTnKEgxUAm0x6Kshws2gJIh4q2snBotlCDbpxwI0z7d0IaWGbJQ0qxVykVRfcB9jQ%2FVaV3hpo4gHYC9UJLyQjSHCl3Pu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cdf8d73181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5834,"size_decoded":2166,"mime_type":"text/css","magic":"ASCII text, with very long lines (5833)","md5":"eef5961514048737fe70b64948f7b10f","sha1":"f5c02df4665eec64f47ea9ac685bf9f598b8c2ed","sha256":"d43e0ce1033f027d9b303acd5fbaf8ed4ad60dac605f22d9ebe817b4fb85884f","sha512":"6a85cde713f3750b4304c7101c897e3d81fed76c598c78bf893df685d25307b8eccb35cfc0b3f2633ad4a07d57caeeb402a375e1114edf145d7044a9a7d43dc7","ssdeep":"96:J2r8Vjr+UpwOITveZUs5in/H28++3Xb3a7H9v0KTNrqbGWWsdJoIaVjgz9529D9D:JQ8VvPITveZUs5in/H28nbfd6uDYyW0G","tlshash":"8dc18944a7487019e13fd921d7c8b5a84029bb43a527069d77aba0364dc3be17af21df","first_seen":"2026-06-28T13:42:53.95228Z","last_seen":"2026-07-12T22:10:39.156515Z","times_seen":7,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileBottomNav-CNXNJXo3.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.723Z","timestamp":1783883414723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileBottomNav-CNXNJXo3.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2a4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x7zV4jtZZ6cuX0%2FDhFxy8JUy3mCM%2BOitlrdgiKmLgfHXUEMeqqJ0k4EskWmw26R8rNw2c4J5S3XGKGS1PdrRSbrhIxnBxHFY%2FfCtoX%2BKtjamqqV6Lkl0HlRy6HtU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08df3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1518,"size_decoded":1465,"mime_type":"text/css","magic":"ASCII text, with very long lines (1517)","md5":"8856115330a1fe19425662565970aaa4","sha1":"44b2a8866727d920e10ee193945b10abe9b6840b","sha256":"f14887cc27576c7ac1fe9fa99c650c07bd9075e4a2477b2916e26afd3500ca08","sha512":"1efbe3447b30e14d3b249d3ba8d1deb634bdeecba6552da35bb853dfecc265ecafd5f3372e4e9571d78f58343699c361bd0f0e7b1554b99edb6267ab4721ae93","ssdeep":"","tlshash":"1b31dba1a41d637d9663c5939cf0866c613eb783ee0b12e87a4a612448cb7f47ab7244","first_seen":"2026-06-28T13:42:53.986431Z","last_seen":"2026-07-12T22:10:39.072954Z","times_seen":7,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-vue-BaKSsOLw.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.733Z","timestamp":1783883414733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-vue-BaKSsOLw.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-e2e0\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gHAWQFuMZoQ6v6SIGzLj%2FNlJQpN5BSayuWol0K2H6eJR2KiEMyQUID3sHKt6YQ3jOwBcTgAwv3FA4S1PaDriEtmGqqn7twaop2h0I8qWXX4x%2BqNmqLNvQaoMooxM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18e93181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 58080\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165316,"size_decoded":58897,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30086)","md5":"2a7c863fa51d4b4d455c688bc9410829","sha1":"e4a83c57099bb40d813a149a538fa052971f58f4","sha256":"b71b0175d6b227160504790a640ccea52caf0d6c9077d83cd5b39b76b7b0ebd8","sha512":"262b43a3adbd8c9ed616616a223c1028d031c7005d749cce0da41b800238a64dbe27a01b098557efdc300db6947a47f3d235686f3287b71f3129aad590ca5ef9","ssdeep":"3072:IvdhkF6zk5lS7IM1W3XENjJKNlaM2TxRP/F/QCmdRDG4RuX:HFkRJ/M2TxBWC6DVg","tlshash":"def32ae432d6b07247e604e650774602f3692919384ed4e8b66dbcef3a62c0291b7f7d","first_seen":"2026-07-11T14:32:36.297367Z","last_seen":"2026-07-12T22:10:39.144459Z","times_seen":4,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/NotificationBell-DBiTXmPX.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.763Z","timestamp":1783883414763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/NotificationBell-DBiTXmPX.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-7e2\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QenhHKz%2FoCFNeXqVxia3iR4uFmcDseLrvpUi75YY38uL%2Ftt%2BPxHTdjb0Z8KOz8bsCeGdDGZujuKGW1ibgjCqhO0MqPB4H29dbYk4R%2F0dYllJZMGP5jWlNrQEa7%2BQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce49193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2018\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4438,"size_decoded":2839,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4425)","md5":"fd00116ce2cf1c7386aec215b0b73ab1","sha1":"b344349fc4e6d8cc28a2e9533d6276f4bc2203c0","sha256":"bd0aec51a5d1a7453d6cc1c9f6bf31a3f58d224b9e9cde505b61346baa455837","sha512":"95cf222a9ad7ff8188294ae835bfb1142bdb9d2532c3156871c16f09961bba5ce387cef1445b5cd035a01f79d82d46a9fe9b62a1f93331e05488d6f9f7c591ab","ssdeep":"96:5UsqINE5Jx4GIcBDVM1lAADGNRbAF45VNFmifgMlNTxjwycHYB2pD:is32jpoAAaNRbhVXNfrD9QD","tlshash":"75919748f086167837b22553429b1240f23f2ba5a4a4c48263f64d793abdd57e35fa9c","first_seen":"2026-07-11T14:32:36.318978Z","last_seen":"2026-07-12T22:10:39.079123Z","times_seen":4,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkSidebar-DVy9B0dU.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.772Z","timestamp":1783883414772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkSidebar-DVy9B0dU.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-6f4\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPjBYPBN%2FdGAFPsX6J7uBhJTs7MX13jEJI59ZiSajv%2BMsXi1nCzB4CEU5nLFdHXl%2FcyCq8HTzcHhR5iOyh4NPlOPHe6EZdtb7ZTLVZaGMevwVVBgDGU57bsql%2Bdf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce591e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4423,"size_decoded":2599,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4422)","md5":"e1e90d3ebf824c83e984a9e9b6be3048","sha1":"aee15eb1e707e1f7decdfcdf92dc847e49326451","sha256":"f1169703b5aa17b0a3385a15675b22d96cb5cb0cffb7d9e37204a163bb34df17","sha512":"3e9cd5c5846bed17dd94f523300faf905a121ad2d2825cba5ced32b4516b938c5856b53cfe138875dc9781c6efe764e4c7abd25015aabd1dd3b46ab5471bc672","ssdeep":"96:TmqBB13nNa2MNY6MiKJDSokW7OPKZa58gy/:aqBTXNLE5xkO5O/","tlshash":"21919798b007dd385323a7695286e43470dc0ffe51f80896f6fec618a378a53d6056ee","first_seen":"2026-07-12T19:10:59.723413Z","last_seen":"2026-07-12T22:10:39.152717Z","times_seen":3,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/world-cup-winner-england-flag-20260603-192743.png","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.248Z","timestamp":1783883415248,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /world-cup-winner-england-flag-20260603-192743.png HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: SB1eo0LcJ6KRyr6bp8kmWzQH8zM6cl1N3lWoNg7ZMIiqKr+Xx75VPUGKdn3x4ZlN7xEgxlSr/rE=\r\nx-amz-request-id: 2AW9EGGMX506SKAA\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Wed, 03 Jun 2026 19:30:29 GMT\r\nETag: \"e23c2c147cf2dd9d159a0fee5cf0330b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: r5KLMs1F8SDwN4iycBBUGTCYS2hHQmtY\r\nAccept-Ranges: bytes\r\nContent-Type: image/png\r\nContent-Length: 2213\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2213,"size_decoded":2688,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"e23c2c147cf2dd9d159a0fee5cf0330b","sha1":"0a89d64582af766a63f10daf6d4d75afb813cb6e","sha256":"479aebd12fd8305278f274d5d943d57ccb2c8ce1ac0695203cd0d4f55761c785","sha512":"83231206d528ae18b9f8a93dec6e394fc119a74cb59a2ed3e3766c4ce053a0f28f9050837adb448b0d686430d0d46863154c2b7bb56fd3e6e9f697044159954d","ssdeep":"","tlshash":"6b411a73e48cf4dbda333a72ee8e2c466a55624423a81ef394b19ce978151918510ed9","first_seen":"2026-06-18T11:43:48.351654Z","last_seen":"2026-07-12T22:10:39.085037Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1152,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UserBlock-eXuExVEg.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.765Z","timestamp":1783883414765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UserBlock-eXuExVEg.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-577\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l02GgZOq1tfn1K7W7CHMPA5XVxyFfPbAm7N9FpRZvA4DHmsMnSCcpYHQnxR6ocjlqQf0kX0ngKvEGiuZderPX8H2tnZk06MUVtGr41kGa6U5N9XnGGX6e68gAXII\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce491b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3372,"size_decoded":2210,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (3371)","md5":"40761033bbf3ee0c8ead88c5580ad89f","sha1":"2b8279cc1e92b1aa67f09f220477588cf02a1e7c","sha256":"c837f180ba0c3106839b36e41059fd8d9343636358ec1ef2a97d6e8374481263","sha512":"53ac15870bb31c09dfcdc21c556a59df856136fd43abe36e94dc8fc9ebfb87655b19508b39463e5f69593d7d5b51293ca93b4e7eda7bf95cbb6dc222701c5f90","ssdeep":"","tlshash":"596182aff505827d12222894d0174c5434ea1b7ddbb43c81d2fe0c396bb6f6087eab5a","first_seen":"2026-07-11T14:32:36.280046Z","last_seen":"2026-07-12T22:10:39.150586Z","times_seen":4,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkInput-1lYlWzru.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.383Z","timestamp":1783883415383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkInput-1lYlWzru.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-208\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xicHwQ1z0HoKRMjfHkyZ%2FphVpBePbIp1lvuUsjCGO3C22iC1fRHNhkKee%2ByTmrDw6kzwNwWN0fSp2X8%2FNLGtCRoV7nGakc8LlipTplwQCYzD7MZ8vXd%2Bap7PF81J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d22a193181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1510,"size_decoded":1316,"mime_type":"text/css","magic":"ASCII text, with very long lines (1509)","md5":"2187b3913d978e410f80b6a99c9c7553","sha1":"ca7de8844d495d29cdf9eba1ec17203b7e933f63","sha256":"b3677d9ec8d148fb3bca1ea696649fc1a46dd887d9a68e0a235ce432c9469a63","sha512":"c0e5bf4dc9ccfce8694a8576b4fa84b4d134d80d727a197603107d961f45703b6530c41c32c8fb6db9b30968adddd32ec00f242c83276c251d26413dd53fe434","ssdeep":"","tlshash":"aa316b53336873693837d87722f8c1566110a64b9726c3a5dde090394aa76e12f36ff8","first_seen":"2026-06-28T13:42:53.976772Z","last_seen":"2026-07-12T22:10:39.093523Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LanguageSwitcher-BzD7FPJX.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.405Z","timestamp":1783883415405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LanguageSwitcher-BzD7FPJX.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-311\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpZERYx%2Fz3F%2FC0CUDwYCemDDkT%2BjBZtiZjdoXw%2FYnsWTUYU1CYAJEg98jzj3Alz5z4hM1KzyDXEWMIeJlga5xEq38VxCgHYwzYpA1SY65MxuQ1mnqeAkMy0rEni7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d24a293181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2360,"size_decoded":1581,"mime_type":"text/css","magic":"ASCII text, with very long lines (2359)","md5":"a55e718c30a922aa493cefa0baf687a5","sha1":"a4520dae8df06f8fd9ed0ca0e9008339db16fbae","sha256":"65d64ad7b83c09933425db56efe9a608f5f87a1fdff322a1ed85f8d8db76b8ec","sha512":"bc9600a7db9d9ac85fe3b25acd67f3fdaa7119b2af952951231b803ec659341bd77e588f2dccdc8ce08d2a1c386089aa75973fa656c5af780453b77a85c6df4e","ssdeep":"","tlshash":"6e41cf417e4c2f2db867d054e7ba1c4ad1156e87cd26298ebb89b1128cc37d93ce518c","first_seen":"2026-06-28T13:42:53.857158Z","last_seen":"2026-07-12T22:10:39.095978Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SeoMeta.vue_vue_type_script_setup_true_lang-dMsMHD_T.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.777Z","timestamp":1783883414777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SeoMeta.vue_vue_type_script_setup_true_lang-dMsMHD_T.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"6a53a112-38b\"\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZIfdU%2FFDLJAbIGmeyTyQ8AwGTLnbv1aI8Z%2FLFzK%2ByOu8QOmodEpX3xFn%2B2kiVrJLyUUP1MpAP18R6uIWfSBYMzh8HoGxJMK7GVbg%2B9Q%2FF4TzJBwSaUMkSIMqVKbK\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a258ce59233181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907,"size_decoded":1260,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (906)","md5":"e806d2aaca818e28ef96e16e9dbff884","sha1":"633f4c45b991870c323b6cad4dc791b8172c3751","sha256":"8a20462ad582f085b217adca7b87efc68ad918b4246b13fff4eeced94b906159","sha512":"a735877a063ddc1d9fc6a4a7a08ac3d6cec21cd064dc9ce871896d34f7e87c73a097bc3a074f9330a5ad51e0a84ceee42d98921b11d31d2097952f3b416b9939","ssdeep":"","tlshash":"a211001dbe04f4b457ff82806e7694a9823487229074c89259c78d5a2fe0ff3c8b3718","first_seen":"2026-07-11T14:32:36.334985Z","last_seen":"2026-07-12T22:10:39.129779Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/SearchDropdown-CSNXB-FD.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.399Z","timestamp":1783883415399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/SearchDropdown-CSNXB-FD.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-3e5\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=suR0RBrz72oZdvx5uax3NLAdRRQgwZjVNOyl3OiL5GQapajjAJpSKxBGPwFLEyUaYFt4%2BS9ETcdmDfseulAyLPwwboLJqnMX5s0G89caVrhPnCNtaHDiNGEM5NQb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d23a243181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3247,"size_decoded":1787,"mime_type":"text/css","magic":"ASCII text, with very long lines (3246)","md5":"6b935e3364f6923ad75522de5df03e0a","sha1":"bfbae28282d3dd7e05a44387b336147629b1d170","sha256":"e4c6fc8351eec269079e8074619b035931b5550f7d23b1585f2c7f4dd96846a4","sha512":"d666eee905932ec8e58f098923691cc9aeb4d094350d3cc076318172b7c045d369dc290145b35a56f3b175c04df3e14f39720c17da8cfad5c117a0544d45630d","ssdeep":"","tlshash":"ec610fae708ce46a7477d32145d81cade5146b63ee13a3c5967e512284d3ff32c322ad","first_seen":"2026-06-28T13:42:53.919494Z","last_seen":"2026-07-12T22:10:39.123029Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LiveQuickChart-CiiG3_iC.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.420Z","timestamp":1783883415420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LiveQuickChart-CiiG3_iC.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-45a\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkCbcsxybii2p4ms85l3YFHMT9eQBiE3bSIkAcUmH3jO%2FlC%2Bf6kV9Ok67KAUpI6DFodENd0fEj1alwlVStz7AY9CdP%2BaNBZw43hOg8K9HGUmdha2N4ipO6EV0IXH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d26a343181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4326,"size_decoded":1909,"mime_type":"text/css","magic":"ASCII text, with very long lines (4325)","md5":"a4e7e6643ecb7c25040c6c7aec6ba057","sha1":"b2b28c11079cac8c6080c8f027bb2f1edcba50ed","sha256":"e7f2d52922226eed694a437e665b53d3fb98f839346a6d88bc1c4e3c79ed6005","sha512":"ea09d89733d6baa5ad1fad79ca5f5c533d106617606345b2d487e4331bd661bdffe928f1e87980c46271eff4fcbe22920aa6040faf6ec336b613e7198918f2e3","ssdeep":"48:PkQkUga2ef2ztde2sh/QqyScCID5tF/yz8t3a0tfEHLQT8:ZTQt6YWmXg","tlshash":"e991ab1aec69261be437d3011a8f2a9d50249b07d83309b595769338cccb6d36d9bfce","first_seen":"2026-07-10T10:24:44.867888Z","last_seen":"2026-07-12T22:10:39.118474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.exchange.coinbase.com/products/BTC-USD/trades?limit=1000","fqdn":"api.exchange.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.151.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.808Z","timestamp":1783883415808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exchange.coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 02:32:19 GMT","end":"Sat, 15 Aug 2026 03:32:17 GMT"},"fingerprint":{"sha1":"CE:B7:13:1E:FB:42:F6:14:A2:15:C9:96:F0:60:E1:0D:1B:F7:B3:2B","sha256":"0B:40:05:98:2F:6B:9D:BE:AD:5D:DB:B1:C9:F3:E9:E6:5A:E9:79:B5:77:3E:5E:90:B5:2E:6E:ED:B9:7F:EC:7E"}}},"request":{"raw":"GET /products/BTC-USD/trades?limit=1000 HTTP/1.1\r\nHost: api.exchange.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nOrigin: https://heotox.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Accept, cb-session, cb-fp, cb-form-factor\r\naccess-control-allow-methods: GET,POST,DELETE,PUT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: cb-before, cb-after, cb-gdpr\r\naccess-control-max-age: 7200\r\ncache-control: public, max-age=5, must-revalidate\r\ncb-after: 1054778854\r\ncb-before: 1054779853\r\ncontent-encoding: gzip\r\netag: W/\"3791-EkW5jz+noGMYoaCn6Tb9rFkxHjA\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: EXPIRED\r\nset-cookie: __cf_bm=kgAr8b8VeUxwZJI1uRfheEf7pApIqHjmxhvc5JjpQ5Y-1783883415.8277242-1.0.1.1-BC96KdftS9oqx8vjFyTi9UPDtr1PaTvkkwKi5nLy2qpsL4YSnQKggqQSHS8zW3CgqnadEleB4pY3ZTYT8vBV_h1_oO_YPJj_0pu5b6yxOsC2OhSPlU2WomBYmdBGdlU0; HttpOnly; SameSite=None; Secure; Path=/; Domain=exchange.coinbase.com; Expires=Sun, 12 Jul 2026 19:40:15 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5s%2BjzUB4MI%2B5p0DiKV7TVix37NgN%2Bkznkc2QZRWN%2FWaDFbPh%2B4k764woN36zL5%2BBFlMg65v1OZ7hqd0QsyOUErOmAoB1YAUXYQikYXpqfPjEngDvizV9Kgjz1hrDUk4Q4nqLvKMB8Hn95w8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1a258d4ed34a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":119514,"size_decoded":15779,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4e193d750bfe1f8c2659037d250fecca","sha1":"5315cf630b67e37c4b662a2b7901e1af12e51fa8","sha256":"0006f4a90def0d81811dc279dbe7a59b607f833887792e317a622cd4061052bf","sha512":"5556b624ddcef6a2d1c81232501d775a0f956bda752afab133dedb75ebb59f8d2836eca2fa70196ee57617c8e915532547869e3311d4a18e2e0347b6c41cbdb6","ssdeep":"768:iXhffyfsgaNHztu8OjbhGU7A//s67A4bP0hsaFj1C6z4bOCXdBrjDMMUl0ql:WKkBALby4Cw4xXdtBJql","tlshash":"8fc3f38e532eeef8f8b8dd30da177df66aafb00345e4575512d08e2543ec1276a226c1","first_seen":"2026-07-12T19:10:59.742962Z","last_seen":"2026-07-12T19:10:59.742962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":5,"connect":2,"send":0,"wait":174,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/RegularSlideCard-eh9fETkM.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.727Z","timestamp":1783883414727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/RegularSlideCard-eh9fETkM.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-2ed\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYAECP8zbf3%2FKZnhmeRKlTSVEAyCYoTwWxI0WllkXX1k3wIKkIwbsq2H4ZfdNXH5rO%2FmoAKdFcYLXOaZOjwe%2F18GmGFzipDooY3sL1NvFrw02A6xhzogVL%2Frg8eE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce08e33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 749\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2235,"size_decoded":1538,"mime_type":"text/css","magic":"ASCII text, with very long lines (2234)","md5":"e6eec4aa53488ac07bf3e6bd58b49465","sha1":"c5bdfff9becd4bfb38cb0f25763228a22c3220b3","sha256":"5329ce60321ef69aa5f7c048231f997bfb9bd52ccc2df957488244f9e79830a4","sha512":"df5041c8557d4ee3a4f5d0ce468625d0421df721fa8c37878f0f459090083a74e141fa8ef012ddf6aba74d954c36209aed59d2bfe72bf2e4e4c133fe70ba64f1","ssdeep":"","tlshash":"c841da69fd8e5b38e6bbd81394804b4f7704963287eb01ca9f45753849cb1e32d2d54c","first_seen":"2026-07-10T10:24:44.826251Z","last_seen":"2026-07-12T22:10:39.077627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MarketFilters-DgqPiVpg.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.744Z","timestamp":1783883414744,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MarketFilters-DgqPiVpg.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-86e\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ogu2TM9brqxhC99GK6%2FMLP3uHzxVDkPYk4pPz5mDG5TVQOFuRgC0wcdnoQLz%2Bf9msyc3Uv1AFuWiaAxVAoLg%2F3XOhxz5I9mn3UVJUiiBJobT5IfwF3BpkrIrO%2Bih\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28fa3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8388,"size_decoded":2977,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8387)","md5":"f69dfcf6edf542fde70e888b4155adb4","sha1":"c06c4b27d4b2e12374bec38b6ea79db39c7a8877","sha256":"cb0d3496531c997d5abe1795a25ea16ccb444eeb6534a07d7f3fbe80b508be16","sha512":"5f4c8ef6dea4faaf08cbe89e2d00d34355fe463f466985908ffa48ff93986e437d42bca9ce239dd9b0fb86d7c0f501cebe3533df19b961d03b496600b04d8ddd","ssdeep":"192:2+CT3kgmScw2/z1pzwzKo4MOEpLkDnA/QdiB2ABvS:2HTXJy9stOqLkUBK","tlshash":"a702850db2e7083c92239559b294b5213a2c173ae9451cc6c3fe8e74772dda8bb271dd","first_seen":"2026-07-11T14:32:36.307602Z","last_seen":"2026-07-12T22:10:39.123815Z","times_seen":4,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/vendor-realtime-DINYGnMF.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.734Z","timestamp":1783883414734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/vendor-realtime-DINYGnMF.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-56e8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FKn6xHLUJH6jLuvogpzWATYEaIsfZwx7FCD5t4Mt1UtF0MJKq1KlZCXkm2ibwRhnUU%2FNgp02DIEaOdsXLj4gAeLXmVjC20sI1h3RsejAk%2BWV8UgnPu71QUG%2F0KI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18eb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22248\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86986,"size_decoded":23069,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43452)","md5":"cbb739bd2cbb7a27482142e46c2800bc","sha1":"96e93f3dc7010d657bfcdb5c2a3daa990781cd3c","sha256":"93a411fbc7c1eced84ca717a13aae4cfb00220895437d85695baf93928d2d0c9","sha512":"9e50389135e9b74b59ab186968d96d3ebc4ecb6fa47f9c73a7606077af65197566a79991f5d3b946e457b9717d031d6af73f8ee715f488d943d32eb92c910756","ssdeep":"1536:XZSss6ffsitHFQwsepb4UsTznO2fR5ocbZHqPyY+shqn1/Qyxnn:G6qIMnO2fR5ocbZHpBshqn1lxnn","tlshash":"3783c7c4f592e02647e7b1a19c665203e2382aa46109c03c7b7cdee6ec756c9e237f75","first_seen":"2026-07-11T14:32:36.259155Z","last_seen":"2026-07-12T22:10:39.104779Z","times_seen":4,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HeaderMenu-BnhvYEMo.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.394Z","timestamp":1783883415394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HeaderMenu-BnhvYEMo.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-564\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBVQP1t90osdBORZ6iWmsB6nwM7OnBxTfuUqg12qoajAX7BdiIVbDnNNp42SnhUxNYfi8zOfCjhiE%2F2WaRM0rfIo3c2EciADQSkG7C%2ByVuVHZwWzKDDOkJXF1XUF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d23a213181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5834,"size_decoded":2173,"mime_type":"text/css","magic":"ASCII text, with very long lines (5833)","md5":"eef5961514048737fe70b64948f7b10f","sha1":"f5c02df4665eec64f47ea9ac685bf9f598b8c2ed","sha256":"d43e0ce1033f027d9b303acd5fbaf8ed4ad60dac605f22d9ebe817b4fb85884f","sha512":"6a85cde713f3750b4304c7101c897e3d81fed76c598c78bf893df685d25307b8eccb35cfc0b3f2633ad4a07d57caeeb402a375e1114edf145d7044a9a7d43dc7","ssdeep":"96:J2r8Vjr+UpwOITveZUs5in/H28++3Xb3a7H9v0KTNrqbGWWsdJoIaVjgz9529D9D:JQ8VvPITveZUs5in/H28nbfd6uDYyW0G","tlshash":"8dc18944a7487019e13fd921d7c8b5a84029bb43a527069d77aba0364dc3be17af21df","first_seen":"2026-06-28T13:42:53.95228Z","last_seen":"2026-07-12T22:10:39.156515Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UserBlock-DO0zZ3Mr.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.401Z","timestamp":1783883415401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UserBlock-DO0zZ3Mr.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-45f\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XqNukkEpqXpMSE8gvwtoEpNsD64BIS2Ad9GcBff4msF6pQCKqiJsLXoCh7AfZy6G9xUUqy1phJcJiBAVPTj2YpwJOVefpEQDMis1kQIIfDSSdzdh1m%2BuOJD8bci6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d24a263181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3931,"size_decoded":1910,"mime_type":"text/css","magic":"ASCII text, with very long lines (3930)","md5":"43ba824c402aa1b3316d8ad717ba6472","sha1":"1dad0ead225ddc279440db46bed6baeed0e83746","sha256":"f84426a9c53c37a7733aa75dc3bde6dc7c71ba600502de7bfd55090b8fec7cd5","sha512":"2ea7cdcb76b7493d108bf888ae0ed0190abedf1934f7870b3b796b99f1eb4c19067a3b18b84a2b76a762b7e69dccba2099a76b2e76023f475c235658ba9ec385","ssdeep":"","tlshash":"78818b03b34c105bb663f59215f8c9c415b4e743df3365e6b27861268af3b9192b1a8e","first_seen":"2026-06-28T13:42:53.861458Z","last_seen":"2026-07-12T22:10:39.077124Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkModal-DLe5wved.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.709Z","timestamp":1783883414709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkModal-DLe5wved.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-342\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YB8KV0n8cVq9C9bj8uSQHScSoxLWHbICLqkO9uHqEQb5VOfy6rw7Sin61XsU5aE79SJ6AcoNtmCF19flK2gA9hgGZQkfErcvWnVTz8EarVbxrAEVESUKUPJ5vc1H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8ce3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 834\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2637,"size_decoded":1615,"mime_type":"text/css","magic":"ASCII text, with very long lines (2636)","md5":"162e994bc4301a12419049f2ca2f6b0a","sha1":"014440ab3caec4706aa13bd125a80b78b3194baa","sha256":"3fe355b988ef8609bddd36df14df3c6b5413c5f24aaf4d9944fb9c0bbe7a08ea","sha512":"e9d0db620c52eef90bd4eca0dbba7fadd0f75efa560f96a6ee310dea5fe362a4c54a241690d07fb81d09b3b7a491d27d08382536bf51cb802da62a2eec057d2c","ssdeep":"","tlshash":"5b51ca47bdad50fa782fd10b7895ce8c831dea47c93e2ccaa837512909d73d518a11d7","first_seen":"2026-06-28T13:42:53.99273Z","last_seen":"2026-07-12T22:10:39.102499Z","times_seen":7,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UpDownSlider-C3Zi_zXN.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.746Z","timestamp":1783883414746,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UpDownSlider-C3Zi_zXN.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-ab8\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YeL3T7L3Wdd1OPoKbCjKFxgXzJ8%2BywEMmX4sEW09DyDiyFZoKY%2Fe4L5Sgzc%2FXnHYbzCPBlten2b0Z29jGxIbPLweSWucBd6qm6Xxp7J%2FhtRxTVoSOsHVjfp5jIhY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce28fc3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6526,"size_decoded":3563,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6513)","md5":"a92843569202c8eaf785f6beb00f6340","sha1":"0c5b1fc9da40e2efd30841f61ad2083ca361827d","sha256":"14f5803dd1c84749e728dd8908c3203f2ebef37f93d95f5916e35d9387172532","sha512":"5e167c6c3d9b0594d0a7faa665e2b1b8b353b8c0bc3e080d96f7e4a10ae9dc990a52f954e235a7e775c99843c11f74e36dc7c28da45d1c479c511898639bd71b","ssdeep":"192:Jb24bk9mTqvF1DXwj5Ecs+IgkYFmw/VbHQu+d93f:JulXwj5Ns+Igbmwi9v","tlshash":"13d16608f22a4a3f93f3004ad092485164172f63651488a5c0fb6d7e3faed26bbdd66d","first_seen":"2026-07-11T14:32:36.317146Z","last_seen":"2026-07-12T22:10:39.146722Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/NotificationBell-CzxYZmxH.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.397Z","timestamp":1783883415397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/NotificationBell-CzxYZmxH.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-409\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uU4PvpS58gjECAdP%2BaoQXXwHWhDRNrNAdescyyIfqJSa7IJux4HSbXAFbMP3FzrJGZ3Wwe8GzsYIp2L2P%2FMr5mMohUW4x5tZUZaK0SBz5c0jbIPUKtWLnoYehwT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d23a223181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1033\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3701,"size_decoded":1826,"mime_type":"text/css","magic":"ASCII text, with very long lines (3700)","md5":"0871628174c21e1c39f79d7d4fad2739","sha1":"adc4e468d96001efad052dd993641a4ca10a4bfe","sha256":"fc7120ce22f81f4a30981d66c6f40472bf23d5d8668891d201c30c9ef6d9557d","sha512":"5f001572e309e33ee98c458a3f1317a35148fd208d2d970d91c14dbd4d7c874ce13b7bb8dd603da95be82a7e5aff3c87a5c862b8b4cb06776e9753137fc41954","ssdeep":"","tlshash":"4371efb03b58716f753fe0a3659849ad911cb7a3c523c1c9b659a271ccd36a23fb21c8","first_seen":"2026-06-28T13:42:53.991451Z","last_seen":"2026-07-12T22:10:39.12218Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkSidebar-D-eOVEPN.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.406Z","timestamp":1783883415406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkSidebar-D-eOVEPN.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-461\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qI2QP7J2DPisDT9iY7HQDqMQyg%2FQ%2F%2FpntA7bWS7xKelLPSf6gPeFdlUWyzXSPKLwby8SYISv%2BkYVI5epqRb9YSAum9VxJOijzE5gLHDdgtLocnOhx%2F3fsMKrJuCe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d24a2a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1121\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3833,"size_decoded":1920,"mime_type":"text/css","magic":"ASCII text, with very long lines (3832)","md5":"c90758317c2738507aa83c1351595069","sha1":"16e436fcf583d7c632f534ca5debb0e2776f7b8e","sha256":"9346ff20f503b90d2b31e7a2627bcbf178c59bd41ac335f9f4484cd2d3fa5689","sha512":"bd9d4a4ff2513360446d855ad7e3ed7c423d9cd1f368aa56ca49ee2174ede78eaf877a05766d727683c57e54ec2528bb516f2fda7d14025e0076404b674b99ca","ssdeep":"","tlshash":"9381e022310820667577c043d8e402ad51ede6a7a33601edfb89cdb708bb39667611fd","first_seen":"2026-06-28T13:42:53.962456Z","last_seen":"2026-07-12T22:10:39.073627Z","times_seen":7,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/UpDownSlider-DPI_q3wc.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.705Z","timestamp":1783883414705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/UpDownSlider-DPI_q3wc.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=0,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-57d\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8rp3dpvi3d4PJlDWUUdxcc5pwOSnESwb5ICeNUpiJ56VeJTa%2BpuTl8jtS132hNl2qNTgsrPCbQOmgEBS6tiL4k59jUWyq23zbus9qC8jDI5r7XeqNAeGmT183hMo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258cde8cb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1405\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":2189,"mime_type":"text/css","magic":"ASCII text, with very long lines (5516)","md5":"08074183f5b2adbe7beec15cc8a869e0","sha1":"e1bff4644e4fe74072a7e04f22704b4480ea5126","sha256":"a420e73b9673aca6cbcd91f77df02b833b5f7a8dcbf28a24ae4823e4e080b97f","sha512":"71dafb095d3dfb11f14598aa849f211ea729458a4e51831d29d97bcedf4964609bc11ccb17a8bff12ef119efefb49e8c3ff1eb5a3b64204c2d72826334f7a58e","ssdeep":"96:/QJynLUSLorByorOMYYC+YMhy1rjy/Ak0bLnuNIgRn:/BZLorMorOvYChGJ4k0bDuBn","tlshash":"5eb1f114bd4c122868b7d16338c0566f629fe623e62381ed950b61bc5fdb9d33ba81c8","first_seen":"2026-07-10T10:24:44.877959Z","last_seen":"2026-07-12T22:10:39.0824Z","times_seen":6,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/MobileBottomNav-BQzi_t2B.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.775Z","timestamp":1783883414775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/MobileBottomNav-BQzi_t2B.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-425\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydJt4ODP%2FZiURkv8Or6vCtiSHvAK3AQ7%2B6rGBGE02Jjyp%2BzJ4J%2F5Qwstoy62ci%2FQNwJ6hhC6NA8ulz7sSoAO2I%2BjSSg8NlRYEoAtXnpFts%2FpVAbEgar9dXfCTYda\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce59213181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2683,"size_decoded":1886,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2682)","md5":"5491f0b555f9e4e7999003db5d4a87b8","sha1":"8c920781cb87740051895d8fdf8524581a64c8ff","sha256":"e5c68a0a66a49df45d61d5cd3dd727e826119d57ff4bc515bb3a9ea09f3df629","sha512":"761aa9059fe5fbbeaff7252334fba3397402ba245976a21f25721b4f582261a087ad72fba306511220b49a5684ecbfdf1f9c04011a561601b90a35cf46b32e22","ssdeep":"","tlshash":"29516706391d46bd5123c1e7c7167b52325d33d7b608144a87ee40302a7ef5bf63a9d9","first_seen":"2026-07-11T14:32:36.345224Z","last_seen":"2026-07-12T22:10:39.112606Z","times_seen":4,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polymarket-upload.s3.us-east-2.amazonaws.com/atp-tour-b4390c4fb8.jpg","fqdn":"polymarket-upload.s3.us-east-2.amazonaws.com","domain":"polymarket-upload.s3.us-east-2.amazonaws.com","tld":"s3.us-east-2.amazonaws.com"},"ip":{"addr":"52.219.98.82","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.243Z","timestamp":1783883415243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.s3.us-east-2.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 13 May 2026 00:00:00 GMT","end":"Thu, 26 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:B3:D2:BD:FC:0A:59:F5:B2:0B:79:15:1B:AB:1D:FE:5A:0C:7E:74","sha256":"E0:CE:E0:F0:37:7A:9D:49:11:F3:23:47:66:47:8B:35:5D:0A:9F:89:64:7B:42:6D:6E:FC:0D:1E:74:AF:18:BE"}}},"request":{"raw":"GET /atp-tour-b4390c4fb8.jpg HTTP/1.1\r\nHost: polymarket-upload.s3.us-east-2.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: qB0lO9U9CIZFubZOXWN3QCBXhSDDiYR33oUZWTqfxyTXH/GhOatQ+3UL3ZdS0YyY1RPKOfxgmbw=\r\nx-amz-request-id: 2AW9EJ0FV6GWCNMZ\r\nDate: Sun, 12 Jul 2026 19:10:17 GMT\r\nLast-Modified: Thu, 18 Sep 2025 20:08:09 GMT\r\nETag: \"441efb2e886255a22d29adc014f57578\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-optimized: true\r\nx-amz-version-id: Bh9GnTdceXli9myOBiGTVqcuHZRks6PC\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nContent-Length: 28298\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":28298,"size_decoded":28775,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 900x900, components 3","md5":"441efb2e886255a22d29adc014f57578","sha1":"23291920fadc1f4c1e33b528f56d44fbfc16c753","sha256":"bc197b7195496b2792ca83b99fb8dab356382debcac8a383ee5432768fef22be","sha512":"207b9253414b0be9d35ad2a3f573781fe97292f5c54afe249b22d5a95eceacf3999bb9630d63cb8584c5dc9d7fdcfade5db518573686c88c96bf53c97dc15826","ssdeep":"768:jsgXxYWUJIxHCPHHFT9+gUZ+673Dn9n/SfGA:XxLfxH4HFT9+gU8673T1KeA","tlshash":"94d2ae3bd2705860c04bbbb1f83ca109771e9956295f2db2829d1a3da913f4365f3f98","first_seen":"2026-03-02T13:05:31.054192Z","last_seen":"2026-07-12T22:10:39.099117Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":107,"send":0,"wait":129,"receive":110,"ssl":674},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/LkLayout-D8JC1FIO.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.413Z","timestamp":1783883415413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/LkLayout-D8JC1FIO.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-278\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dIzdgC237KjimTIWULth9XNRvjmw9sAh4%2FeG7GPsY6Qxihyvb2GLzmMDBQCYep2o%2B1JhbrD0Uw4UShqD55mbllPJ9R6bQR6evXcES6BH4dbl3tKpMUpsRGrAKVk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d25a2d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 632\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1546,"size_decoded":1424,"mime_type":"text/css","magic":"ASCII text, with very long lines (1545)","md5":"3b57898b2509c86acbfea172d6b37c26","sha1":"815d399fa1c52b14a03bdef0eb92094780fb83fa","sha256":"41107b74d6dbb6d2c63a6777e5ae9d6736b1e837b712ce5f84ffbeee65957054","sha512":"8fc1c2e702647ea4ed6cbc80e656a8fff9adacd16417bb647133ef19a3be7e40715cb01b54af5829395344a5dfdc962ca38b0c9313c684b024eb421c055554f8","ssdeep":"","tlshash":"7a31a9b330a3423e7a1be136c4a4a31d933fd193db2365afabe5105501e369c9871095","first_seen":"2026-07-10T10:24:44.863489Z","last_seen":"2026-07-12T22:10:39.084512Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/Icon-lM0uRtJ7.js","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:14.740Z","timestamp":1783883414740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/Icon-lM0uRtJ7.js HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-424\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgzspQINneYd6p%2Bx1oui%2FsYuERYA5SNH9oqlffnvDCIxkX9Pg%2FgLqEMzQY%2FNH9Ls3ebEuZdhlvR%2F8zwwMWECq8B3grxidLeTDP5HIW3D8tHyRl%2Bx9l5g7xTCCHu2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258ce18f23181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1818,"size_decoded":1883,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1817)","md5":"934787fdbc00fa34b7c577a467c65ed0","sha1":"db3ead6133fb2743e8024562fbdf3f7d9b3a2934","sha256":"b74f0003638e9283657d3823b9d4a8f80b41d1dfc7ecf67c9e5373765df12966","sha512":"51f960a5b7ebde8f90f09d723aa1a7745ad17e62241a2c377731e1e84473f3b9945dfd198011e81bf83f3cf9add2b91d37280ce1280452283d345fbf42b0f7aa","ssdeep":"","tlshash":"0331746ebb9e87fb778355a6811d7205101c1ab1df2e7f9160d7002c28f045d8a1fa29","first_seen":"2026-07-11T14:32:36.325352Z","last_seen":"2026-07-12T22:10:39.119879Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heotox.com/build/assets/HowItWorksModal-Vl_X5AzX.css","fqdn":"heotox.com","domain":"heotox.com","tld":"com"},"ip":{"addr":"172.67.160.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heotox.com/markets","date":"2026-07-12T19:10:15.389Z","timestamp":1783883415389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heotox.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 00:16:28 GMT","end":"Sat, 03 Oct 2026 01:12:35 GMT"},"fingerprint":{"sha1":"D5:1B:33:B2:B7:DD:AD:12:23:16:66:DF:A7:C5:10:3E:A1:1B:A4:C0","sha256":"12:E4:6D:EF:CB:99:39:2D:93:D5:36:B9:F8:ED:8C:11:AE:21:DA:F0:30:75:97:BE:36:8C:95:2D:10:3F:59:9E"}}},"request":{"raw":"GET /build/assets/HowItWorksModal-Vl_X5AzX.css HTTP/1.1\r\nHost: heotox.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heotox.com/markets\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IkNsWGl3WlFYVHZmYk1JeEUrc1NEb3c9PSIsInZhbHVlIjoidk5ta1pFbjBHaTJaS01DWWRIRzhKUkZPRjBEbFZFNFVlUjFNMjR6TkR6eU1DdDNDSGwwdW5WT2NyQXVDcFVtU3dlam9LOUdDR2lGYTA3cXFNT3NxY01oOFhCd1JlZ2FkdzB4d3V4djlpOGVjVE5rSTBJUDYxODBwWE55ZmZCOWoiLCJtYWMiOiI4YTU5OTlmYzRiODg0ZjNkN2FmNWM4OWI0MWQzZjI3NGJiNDRmMjJjODY1NWY0ZGQwMjg1MjE3NWYwNTZkYTIzIiwidGFnIjoiIn0%3D; atlascorppoly-session=eyJpdiI6InBQTXIvbys3Z3FqUjg1WVY2OVNMM3c9PSIsInZhbHVlIjoiZ20rRkdGOHo5RUJ3R0JmT1RtdGRWajFjTnk3aVlyTFRqaHJqR294MjMvQzdvYjFhQ0VIbVhpVTNzYlJxc1FnT01ibmllT2pXSzk2SExlQVVZNEZsOTQ3cER1Nm1YQkVPQlhLdE52eElEVndIL0FyRUt1dFg3akhwYzJzdTZQUGUiLCJtYWMiOiIwNzQ5NTkzNDI5YzAwNzc0MDE4NTlmNjNhYWIzODlhMTkyY2M0ZmFlNGUzNTM2ZjIwMDg0ZjA1NDMzYTBmMmY5IiwidGFnIjoiIn0%3D; tp_mamont_uuid=eyJpdiI6ImdhNmVHMVFFUjduUk9iUDNZTGtWeUE9PSIsInZhbHVlIjoibkZmSzZoKzNGamRvc0ZWb2xTWnIvMlFtWTJsMTNZWTd6N1dUUy9zd2l3a1hHbG5CdG15ZVRqY3dSYTZsRk8zUmtycVdhUm5uWWZSOXRQNWpjT29VaEVTbkRLNDdWV0sva0QxYmdmczZwM1U9IiwibWFjIjoiODQ0MjQzMDgwMWExYTUwNmNlNzBlYzhjOTMwYzgyMzI3MDI3ZDM3MWNiMDI2OTMzNWNiYTQ0YjEzZTY1ZDhlOSIsInRhZyI6IiJ9\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 19:10:15 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\nlast-modified: Sun, 12 Jul 2026 14:13:38 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a53a112-35b\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 12 Jul 2027 19:10:14 GMT\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmIEx7qmJ7RFYJdT9A%2Bfew59dWlATrripBni3vcphhuxizhW17Tg5yd42l%2FHrw0nBjWWWfYz6sVLj9EdJB%2FDJZW9qUPi57MkBpuP2U4A%2Fo7IwYrxUXtsgW7cGZ%2FD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a258d23a1f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2343,"size_decoded":1657,"mime_type":"text/css","magic":"ASCII text, with very long lines (2342)","md5":"98f403603b6ba74d8314a6797380420e","sha1":"5d1220daa27f8a2f20bc2f2e5b58c2322845bdf4","sha256":"e7e9a7cb0558afdf0a49d8df8966a84000fb31fcea04f407d21e9929ee490bec","sha512":"faf467745c7fcd2543ddc66224f350b94ba24ccb05a7b350a2980d46439c2da447f5559314901919bb11cfe53ee98da62ce85489b56ba6864e5d9937a4bc0aa0","ssdeep":"","tlshash":"d6414260f689702cb03bd13638e5056f21ece307e7920bbdaa91761245db7861f3bd86","first_seen":"2026-06-28T13:42:53.983932Z","last_seen":"2026-07-12T22:10:39.090729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"heotox.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}